Attachment 530 Details for Bug 1406 – Debug level 10 of success case

Debug level 10 of success case

testdata.good (text/plain), 239.75 KB, created by Eric Horst on 2004-05-28 14:34:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Eric Horst

Created: 2004-05-28 14:34:44 UTC

Size: 239.75 KB

patch

obsolete

>[2004/05/29 21:29:39, 6, pid=25769] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.UNKNOWN.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/smbd  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/smbd  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:29:39, 2, pid=25769] lib/interface.c:add_interface(79)
>  added interface ip=140.142.15.168 bcast=140.142.15.191 nmask=255.255.255.224
>[2004/05/29 21:29:39, 2, pid=25769] lib/interface.c:add_interface(79)
>  added interface ip=198.48.88.162 bcast=198.48.88.255 nmask=255.255.255.0
>[2004/05/29 21:29:39, 5, pid=25769] lib/hash.c:hash_table_init(67)
>  Hash size = 521.
>[2004/05/29 21:29:39, 5, pid=25769] lib/util.c:init_names(270)
>  Netbios name list:-
>  my_netbios_names[0]="CANON"
>[2004/05/29 21:29:39, 3, pid=25769] smbd/server.c:main(787)
>  loaded services
>[2004/05/29 21:29:39, 3, pid=25769] smbd/server.c:main(802)
>  Becoming a daemon.
>[2004/05/29 21:29:39, 8, pid=25770] lib/util.c:fcntl_lock(1656)
>  fcntl_lock 6 13 0 1 1
>[2004/05/29 21:29:39, 8, pid=25770] lib/util.c:fcntl_lock(1691)
>  fcntl_lock: Lock call successful
>[2004/05/29 21:29:39, 2, pid=25770] lib/tallocmsg.c:register_msg_pool_usage(57)
>  Registered MSG_REQ_POOL_USAGE
>[2004/05/29 21:29:39, 2, pid=25770] lib/dmallocmsg.c:register_dmalloc_msgs(71)
>  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
>[2004/05/29 21:29:39, 5, pid=25770] lib/gencache.c:gencache_init(59)
>  Opening cache file at /var/locks/gencache.tdb
>[2004/05/29 21:29:39, 5, pid=25770] libsmb/namecache.c:namecache_enable(58)
>  namecache_enable: enabling netbios namecache, timeout 660 seconds
>[2004/05/29 21:29:39, 10, pid=25770] registry/reg_cachehook.c:reghook_cache_add(60)
>  reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print]
>[2004/05/29 21:29:39, 8, pid=25770] lib/adt_tree.c:sorted_tree_add(247)
>  sorted_tree_add: Enter
>[2004/05/29 21:29:39, 10, pid=25770] lib/adt_tree.c:sorted_tree_add(314)
>  sorted_tree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree
>[2004/05/29 21:29:39, 8, pid=25770] lib/adt_tree.c:sorted_tree_add(316)
>  sorted_tree_add: Exit
>[2004/05/29 21:29:39, 10, pid=25770] printing/nt_printing.c:update_c_setprinter(425)
>  update_c_setprinter: c_setprinter = 0
>[2004/05/29 21:29:39, 5, pid=25770] smbd/connection.c:claim_connection(170)
>  claiming  0
>[2004/05/29 21:29:39, 10, pid=25770] lib/util_sock.c:open_socket_in(700)
>  bind succeeded on port 445
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:29:39, 10, pid=25770] lib/util_sock.c:open_socket_in(700)
>  bind succeeded on port 139
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:29:39, 2, pid=25770] smbd/server.c:open_sockets_smbd(324)
>  waiting for a connection
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_context_list(763)
>  Trying to load: smbpasswd
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend ldapsam
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'ldapsam'
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend ldapsam_compat
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'ldapsam_compat'
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend smbpasswd
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'smbpasswd'
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend tdbsam
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'tdbsam'
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend guest
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'guest'
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(648)
>  Attempting to find an passdb backend to match smbpasswd (smbpasswd)
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(669)
>  Found pdb backend smbpasswd
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(672)
>  pdb backend smbpasswd has a valid init
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(648)
>  Attempting to find an passdb backend to match guest (guest)
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(669)
>  Found pdb backend guest
>[2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(672)
>  pdb backend guest has a valid init
>[2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.UNKNOWN.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:29:45, 3, pid=25784] smbd/oplock.c:init_oplocks(1226)
>  open_oplock_ipc: opening loopback UDP socket.
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:open_socket_in(700)
>  bind succeeded on port 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
>  Linux kernel oplocks enabled
>[2004/05/29 21:29:45, 3, pid=25784] smbd/oplock.c:init_oplocks(1257)
>  open_oplock ipc: pid = 25784, global_oplock_port = 37640
>[2004/05/29 21:29:45, 4, pid=25784] lib/time.c:get_serverzone(122)
>  Serverzone is 25200
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 133
>[2004/05/29 21:29:45, 3, pid=25784] lib/access.c:check_access(313)
>  check_access: no hostnames in host allow/deny list.
>[2004/05/29 21:29:45, 2, pid=25784] lib/access.c:check_access(324)
>  Allowed connection from  (140.142.110.103)
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x85
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 0 of length 137
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=133
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51283
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=0
>  smb_bcc=98
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 02 50 43 20 4E 45 54 57  4F 52 4B 20 50 52 4F 47  .PC NETW ORK PROG
>  [010] 52 41 4D 20 31 2E 30 00  02 4C 41 4E 4D 41 4E 31  RAM 1.0. .LANMAN1
>  [020] 2E 30 00 02 57 69 6E 64  6F 77 73 20 66 6F 72 20  .0..Wind ows for 
>  [030] 57 6F 72 6B 67 72 6F 75  70 73 20 33 2E 31 61 00  Workgrou ps 3.1a.
>  [040] 02 4C 4D 31 2E 32 58 30  30 32 00 02 4C 41 4E 4D  .LM1.2X0 02..LANM
>  [050] 41 4E 32 2E 31 00 02 4E  54 20 4C 4D 20 30 2E 31  AN2.1..N T LM 0.1
>  [060] 32 00                                             2. 
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBnegprot (pid 25784)
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [LANMAN1.0]
>[2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [Windows for Workgroups 3.1a]
>[2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [LM1.2X002]
>[2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [LANMAN2.1]
>[2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [NT LM 0.12]
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:set_remote_arch(1839)
>  set_remote_arch: Client arch is 'Win2K'
>[2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.Win2K.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.Win2K.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_nt1(329)
>  using SPNEGO
>[2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(532)
>  Selected protocol NT LM 0.12
>[2004/05/29 21:29:45, 5, pid=25784] smbd/negprot.c:reply_negprot(538)
>  negprot index=5
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=173
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=17
>  smb_vwv[ 0]=    5 (0x5)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=47104 (0xB800)
>  smb_vwv[ 8]=  100 (0x64)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=33011 (0x80F3)
>  smb_vwv[11]=32896 (0x8080)
>  smb_vwv[12]=60290 (0xEB82)
>  smb_vwv[13]=65211 (0xFEBB)
>  smb_vwv[14]=50245 (0xC445)
>  smb_vwv[15]=41985 (0xA401)
>  smb_vwv[16]=26625 (0x6801)
>  smb_bcc=104
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 63 61 6E 6F 6E 00 00 00  00 00 00 00 00 00 00 00  canon... ........
>  [010] 60 56 06 06 2B 06 01 05  05 02 A0 4C 30 4A A0 24  `V..+... .. L0J $
>  [020] 30 22 06 09 2A 86 48 86  F7 12 01 02 02 06 09 2A  0"..*.H. ÷......*
>  [030] 86 48 82 F7 12 01 02 02  06 0A 2B 06 01 04 01 82  .H.÷.... ..+.....
>  [040] 37 02 02 0A A3 22 30 20  A0 1E 1B 1C 63 61 6E 6F  7...£"0   ...cano
>  [050] 6E 24 40 4E 45 42 55 4C  41 2E 57 41 53 48 49 4E  n$@NEBUL A.WASHIN
>  [060] 47 54 4F 4E 2E 45 44 55                           GTON.EDU 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,177)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,177) wrote 177
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 242
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xf2
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 1 of length 246
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=242
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=2432
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  242 (0xF2)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   81 (0x51)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=183
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 60 4F 06 06 2B 06 01 05  05 02 A0 45 30 43 A0 0E  `O..+... .. E0C .
>  [010] 30 0C 06 0A 2B 06 01 04  01 82 37 02 02 0A A2 31  0...+... ..7...¢1
>  [020] 04 2F 4E 54 4C 4D 53 53  50 00 01 00 00 00 97 B2  ./NTLMSS P......²
>  [030] 08 E0 06 00 06 00 29 00  00 00 09 00 09 00 20 00  .à....). ...... .
>  [040] 00 00 4B 4C 45 45 4E 45  58 5F 51 4E 45 42 55 4C  ..KLEENE X_QNEBUL
>  [050] 41 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  AW.i.n.d .o.w.s. 
>  [060] 00 32 00 30 00 30 00 32  00 20 00 53 00 65 00 72  .2.0.0.2 . .S.e.r
>  [070] 00 76 00 69 00 63 00 65  00 20 00 50 00 61 00 63  .v.i.c.e . .P.a.c
>  [080] 00 6B 00 20 00 31 00 20  00 32 00 36 00 30 00 30  .k. .1.  .2.6.0.0
>  [090] 00 00 00 57 00 69 00 6E  00 64 00 6F 00 77 00 73  ...W.i.n .d.o.w.s
>  [0A0] 00 20 00 32 00 30 00 30  00 32 00 20 00 35 00 2E  . .2.0.0 .2. .5..
>  [0B0] 00 31 00 00 00 00 00                              .1..... 
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBsesssetupX (pid 25784)
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X(649)
>  wct=12 flg2=0xc807
>[2004/05/29 21:29:45, 2, pid=25784] smbd/sesssetup.c:setup_new_vc_session(602)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529)
>  Doing spnego session setup
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560)
>  NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:set_remote_arch(1839)
>  set_remote_arch: Client arch is 'WinXP'
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_spnego_negotiate(441)
>  Got secblob of size 47
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:make_auth_context_subsystem(498)
>  Making default auth method list for security=ADS
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend rhosts
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'rhosts'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend hostsequiv
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'hostsequiv'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend sam
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'sam'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend sam_ignoredomain
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'sam_ignoredomain'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend unix
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'unix'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend winbind
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'winbind'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend smbserver
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'smbserver'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend trustdomain
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'trustdomain'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend ntdomain
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'ntdomain'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend guest
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'guest'
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(384)
>  load_auth_module: Attempting to find an auth method to match guest
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(409)
>  load_auth_module: auth method guest has a valid init
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(384)
>  load_auth_module: Attempting to find an auth method to match sam
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(409)
>  load_auth_module: auth method sam has a valid init
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(384)
>  load_auth_module: Attempting to find an auth method to match winbind:ntdomain
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(384)
>  load_auth_module: Attempting to find an auth method to match ntdomain
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(409)
>  load_auth_module: auth method ntdomain has a valid init
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(409)
>  load_auth_module: auth method winbind has a valid init
>[2004/05/29 21:29:45, 3, pid=25784] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
>  Got NTLMSSP neg_flags=0xe008b297
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_SIGN
>    NTLMSSP_NEGOTIATE_LM_KEY
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED
>    NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_KEY_EXCH
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module guest did not want to specify a challenge
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module sam did not want to specify a challenge
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module winbind did not want to specify a challenge
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(135)
>  auth_context challenge created by random
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(136)
>  challenge is: 
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:dump_data(1864)
>  [000] F9 33 FE 5D F2 6D DD 56                           ù3þ]òmÝV 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,312)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,312) wrote 312
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 342
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x156
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 2 of length 346
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=342
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=2496
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  342 (0x156)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  180 (0xB4)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=283
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] A1 81 B1 30 81 AE A2 81  AB 04 81 A8 4E 54 4C 4D  ¡.±0.®¢. «..¨NTLM
>  [010] 53 53 50 00 03 00 00 00  18 00 18 00 68 00 00 00  SSP..... ....h...
>  [020] 18 00 18 00 80 00 00 00  0C 00 0C 00 40 00 00 00  ........ ....@...
>  [030] 0A 00 0A 00 4C 00 00 00  12 00 12 00 56 00 00 00  ....L... ....V...
>  [040] 10 00 10 00 98 00 00 00  15 82 88 60 4E 00 45 00  ........ ...`N.E.
>  [050] 42 00 55 00 4C 00 41 00  65 00 72 00 69 00 63 00  B.U.L.A. e.r.i.c.
>  [060] 68 00 4B 00 4C 00 45 00  45 00 4E 00 45 00 58 00  h.K.L.E. E.N.E.X.
>  [070] 5F 00 51 00 57 FB 97 5A  A1 F8 65 7E 00 00 00 00  _.Q.Wû.Z ¡øe~....
>  [080] 00 00 00 00 00 00 00 00  00 00 00 00 15 25 24 F5  ........ .....%$õ
>  [090] 9B DC 9C 11 7B 84 0C CE  41 94 1F E7 28 61 89 BA  .Ü..{..Î A..ç(a.º
>  [0A0] 87 E5 38 8C E1 4D 05 E4  B3 49 C7 C5 04 EF FC F1  .å8.áM.ä ³IÇÅ.ïüñ
>  [0B0] 20 DF 2D 66 00 57 00 69  00 6E 00 64 00 6F 00 77   ß-f.W.i .n.d.o.w
>  [0C0] 00 73 00 20 00 32 00 30  00 30 00 32 00 20 00 53  .s. .2.0 .0.2. .S
>  [0D0] 00 65 00 72 00 76 00 69  00 63 00 65 00 20 00 50  .e.r.v.i .c.e. .P
>  [0E0] 00 61 00 63 00 6B 00 20  00 31 00 20 00 32 00 36  .a.c.k.  .1. .2.6
>  [0F0] 00 30 00 30 00 00 00 57  00 69 00 6E 00 64 00 6F  .0.0...W .i.n.d.o
>  [100] 00 77 00 73 00 20 00 32  00 30 00 30 00 32 00 20  .w.s. .2 .0.0.2. 
>  [110] 00 35 00 2E 00 31 00 00  00 00 00                 .5...1.. ...
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBsesssetupX (pid 25784)
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X(649)
>  wct=12 flg2=0xc807
>[2004/05/29 21:29:45, 2, pid=25784] smbd/sesssetup.c:setup_new_vc_session(602)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529)
>  Doing spnego session setup
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560)
>  NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2004/05/29 21:29:45, 3, pid=25784] libsmb/ntlmssp.c:ntlmssp_server_auth(615)
>  Got user=[erich] domain=[NEBULA] workstation=[KLEENEX_Q] len1=24 len2=24
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66)
>  auth_context challenge set by NTLMSSP callback (NTLM2)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67)
>  challenge is: 
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:dump_data(1864)
>  [000] F7 45 18 E1 AA 9A A2 96                           ÷E.áª.¢. 
>[2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.WinXP.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/kleenex_q  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/kleenex_q  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:make_user_info_map(225)
>  make_user_info_map: Mapping user [NEBULA]\[erich] from workstation [KLEENEX_Q]
>[2004/05/29 21:29:45, 10, pid=25784] lib/gencache.c:gencache_get(264)
>  Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 1085890806, timeout = Sat May 29 21:30:06 2004
>  
>[2004/05/29 21:29:45, 10, pid=25784] libsmb/trustdom_cache.c:update_trustdom_cache(309)
>  update_trustdom_cache: not time to update trustdom_cache yet
>[2004/05/29 21:29:45, 10, pid=25784] lib/gencache.c:gencache_get(286)
>  Cache entry with key = TDOM/NEBULA couldn't be found
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/trustdom_cache.c:trustdom_cache_fetch(172)
>  no entry for trusted domain NEBULA found.
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:make_user_info(133)
>  attempting to make a user_info for erich (erich)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:make_user_info(143)
>  making strings for erich's user_info struct
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:make_user_info(185)
>  making blobs for erich's user_info struct
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth_util.c:make_user_info(201)
>  made an encrypted user_info for erich (erich)
>[2004/05/29 21:29:45, 3, pid=25784] auth/auth.c:check_ntlm_password(219)
>  check_ntlm_password:  Checking password for unmapped user [NEBULA]\[erich]@[KLEENEX_Q] with the new password interface
>[2004/05/29 21:29:45, 3, pid=25784] auth/auth.c:check_ntlm_password(222)
>  check_ntlm_password:  mapped user is: [NEBULA]\[erich]@[KLEENEX_Q]
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth.c:check_ntlm_password(231)
>  check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2)
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth.c:check_ntlm_password(233)
>  challenge is: 
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:dump_data(1864)
>  [000] F7 45 18 E1 AA 9A A2 96                           ÷E.áª.¢. 
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth.c:check_ntlm_password(259)
>  check_ntlm_password: guest had nothing to say
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_myname(1712)
>  is_myname("NEBULA") returns 0
>[2004/05/29 21:29:45, 6, pid=25784] auth/auth_sam.c:check_samstrict_security(310)
>  check_samstrict_security: NEBULA is not one of my local names (ROLE_DOMAIN_MEMBER)
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth.c:check_ntlm_password(259)
>  check_ntlm_password: sam had nothing to say
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 4, pid=25784] passdb/secrets.c:secrets_fetch_trust_account_password(261)
>  Using cleartext machine password
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/namequery_dc.c:ads_dc_name(43)
>  ads_dc_name: domain=NEBULA
>[2004/05/29 21:29:45, 6, pid=25784] libads/ldap.c:ads_find_dc(147)
>  ads_find_dc: looking for realm 'NEBULA.WASHINGTON.EDU'
>[2004/05/29 21:29:45, 8, pid=25784] libsmb/namequery.c:get_sorted_dc_list(1402)
>  get_sorted_dc_list: attempting lookup using [ads]
>[2004/05/29 21:29:45, 10, pid=25784] libsmb/namequery.c:internal_resolve_name(1013)
>  internal_resolve_name: looking up NEBULA.WASHINGTON.EDU#1c
>[2004/05/29 21:29:45, 10, pid=25784] lib/gencache.c:gencache_get(264)
>  Returning valid cache entry: key = NBT/NEBULA.WASHINGTON.EDU#1C, value = 172.22.2.4:389,140.142.3.131:389,140.142.15.166:389,140.142.3.72:389, timeout = Sat May 29 21:31:06 2004
>  
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/namecache.c:namecache_fetch(201)
>  name NEBULA.WASHINGTON.EDU#1C found.
>[2004/05/29 21:29:45, 8, pid=25784] libsmb/namequery.c:get_dc_list(1300)
>  Adding 4 DC's from auto lookup
>[2004/05/29 21:29:45, 10, pid=25784] libsmb/namequery.c:remove_duplicate_addrs2(319)
>  remove_duplicate_addrs2: looking for duplicate address/port pairs
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/namequery.c:get_dc_list(1376)
>  get_dc_list: returning 4 ip addresses in an unordered list
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/namequery.c:get_dc_list(1377)
>  get_dc_list: 172.22.2.4:389 140.142.3.131:389 140.142.15.166:389 140.142.3.72:389 
>[2004/05/29 21:29:45, 5, pid=25784] libads/ldap.c:ads_try_connect(56)
>  ads_try_connect: trying ldap server '140.142.15.166' port 389
>[2004/05/29 21:29:45, 3, pid=25784] libads/ldap.c:ads_connect(218)
>  Connected to LDAP server 140.142.15.166
>[2004/05/29 21:29:45, 3, pid=25784] libads/ldap.c:ads_server_info(2029)
>  got ldap server name lagoon@NEBULA.WASHINGTON.EDU, using bind path: dc=NEBULA,dc=WASHINGTON,dc=EDU
>[2004/05/29 21:29:45, 4, pid=25784] libads/ldap.c:ads_server_info(2035)
>  time offset is 0 seconds
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/namequery_dc.c:ads_dc_name(63)
>  ads_dc_name: using server='LAGOON' IP=140.142.15.166
>[2004/05/29 21:29:45, 10, pid=25784] passdb/secrets.c:secrets_named_mutex(704)
>  secrets_named_mutex: got mutex for LAGOON
>[2004/05/29 21:29:45, 3, pid=25784] libsmb/cliconnect.c:cli_start_connection(1373)
>  Connecting to host=LAGOON
>[2004/05/29 21:29:45, 3, pid=25784] lib/util_sock.c:open_socket_out(735)
>  Connecting to 140.142.15.166 at port 445
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 0
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,183)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,183) wrote 183
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 186
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=186
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=25784
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  243 (0xF3)
>  smb_vwv[11]=  640 (0x280)
>  smb_vwv[12]=64392 (0xFB88)
>  smb_vwv[13]=65211 (0xFEBB)
>  smb_vwv[14]=50245 (0xC445)
>  smb_vwv[15]=41985 (0xA401)
>  smb_vwv[16]=    1 (0x1)
>  smb_bcc=117
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] E8 8A 41 85 CC 49 D5 47  A1 84 26 CA E8 65 2A 55  è.A.ÌIÕG ¡.&Êèe*U
>  [010] 60 63 06 06 2B 06 01 05  05 02 A0 59 30 57 A0 30  `c..+... .. Y0W 0
>  [020] 30 2E 06 09 2A 86 48 82  F7 12 01 02 02 06 09 2A  0...*.H. ÷......*
>  [030] 86 48 86 F7 12 01 02 02  06 0A 2A 86 48 86 F7 12  .H.÷.... ..*.H.÷.
>  [040] 01 02 02 03 06 0A 2B 06  01 04 01 82 37 02 02 0A  ......+. ....7...
>  [050] A3 23 30 21 A0 1F 1B 1D  6C 61 67 6F 6F 6E 24 40  £#0! ... lagoon$@
>  [060] 4E 45 42 55 4C 41 2E 57  41 53 48 49 4E 47 54 4F  NEBULA.W ASHINGTO
>  [070] 4E 2E 45 44 55                                    N.EDU 
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=186
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=25784
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  243 (0xF3)
>  smb_vwv[11]=  640 (0x280)
>  smb_vwv[12]=64392 (0xFB88)
>  smb_vwv[13]=65211 (0xFEBB)
>  smb_vwv[14]=50245 (0xC445)
>  smb_vwv[15]=41985 (0xA401)
>  smb_vwv[16]=    1 (0x1)
>  smb_bcc=117
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] E8 8A 41 85 CC 49 D5 47  A1 84 26 CA E8 65 2A 55  è.A.ÌIÕG ¡.&Êèe*U
>  [010] 60 63 06 06 2B 06 01 05  05 02 A0 59 30 57 A0 30  `c..+... .. Y0W 0
>  [020] 30 2E 06 09 2A 86 48 82  F7 12 01 02 02 06 09 2A  0...*.H. ÷......*
>  [030] 86 48 86 F7 12 01 02 02  06 0A 2A 86 48 86 F7 12  .H.÷.... ..*.H.÷.
>  [040] 01 02 02 03 06 0A 2B 06  01 04 01 82 37 02 02 0A  ......+. ....7...
>  [050] A3 23 30 21 A0 1F 1B 1D  6C 61 67 6F 6F 6E 24 40  £#0! ... lagoon$@
>  [060] 4E 45 42 55 4C 41 2E 57  41 53 48 49 4E 47 54 4F  NEBULA.W ASHINGTO
>  [070] 4E 2E 45 44 55                                    N.EDU 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,92)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,92) wrote 92
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 129
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=129
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=2
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  129 (0x81)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=88
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 15 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  .W.i.n.d .o.w.s. 
>  [010] 00 35 00 2E 00 30 00 00  00 57 00 69 00 6E 00 64  .5...0.. .W.i.n.d
>  [020] 00 6F 00 77 00 73 00 20  00 32 00 30 00 30 00 30  .o.w.s.  .2.0.0.0
>  [030] 00 20 00 4C 00 41 00 4E  00 20 00 4D 00 61 00 6E  . .L.A.N . .M.a.n
>  [040] 00 61 00 67 00 65 00 72  00 00 00 4E 00 45 00 42  .a.g.e.r ...N.E.B
>  [050] 00 55 00 4C 00 41 00 00                           .U.L.A.. 
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=129
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=2
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  129 (0x81)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=88
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 15 57 00 69 00 6E 00 64  00 6F 00 77 00 73 00 20  .W.i.n.d .o.w.s. 
>  [010] 00 35 00 2E 00 30 00 00  00 57 00 69 00 6E 00 64  .5...0.. .W.i.n.d
>  [020] 00 6F 00 77 00 73 00 20  00 32 00 30 00 30 00 30  .o.w.s.  .2.0.0.0
>  [030] 00 20 00 4C 00 41 00 4E  00 20 00 4D 00 61 00 6E  . .L.A.N . .M.a.n
>  [040] 00 61 00 67 00 65 00 72  00 00 00 4E 00 45 00 42  .a.g.e.r ...N.E.B
>  [050] 00 55 00 4C 00 41 00 00                           .U.L.A.. 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,80)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,80) wrote 80
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 48
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=3
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2004/05/29 21:29:45, 10, pid=25784] libsmb/clientgen.c:cli_init_creds(212)
>  cli_init_creds: user  domain 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,108)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,108) wrote 108
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 103
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=4
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  103 (0x67)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  320 (0x140)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=   16 (0x10)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_pipe_bind(1305)
>  Bind RPC Pipe[4000]: \PIPE\NETLOGON
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:valid_pipe_name(1203)
>  Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB  EF 00 01 23 45 67 CF FB  xV4.4.Í« ï..#EgÏû
>  [010] 01 00 00 00                                       .... 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:valid_pipe_name(1206)
>  Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11  9F E8 08 00 2B 10 48 60  .]..ë.É. .è..+.H`
>  [010] 02 00 00 00                                       .... 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 0b
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0048
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_rb 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000010 smb_io_rpc_hdr_bba 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0010 max_tsize: 10b8
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0012 max_rsize: 10b8
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0014 assoc_gid: 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0018 num_elements: 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      001c context_id  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      001e num_syntaxes: 01
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      00001f smb_io_rpc_iface 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000020 smb_io_uuid uuid
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0020 data   : 12345678
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0024 data   : 1234
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0026 data   : abcd
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0028 data   : ef 00 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              002a data   : 01 23 45 67 cf fb 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0030 version: 00000001
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000034 smb_io_rpc_iface 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000034 smb_io_uuid uuid
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0034 data   : 8a885d04
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0038 data   : 1ceb
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              003a data   : 11c9
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              003c data   : 9f e8 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              003e data   : 08 00 2b 10 48 60 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0044 version: 00000002
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410)
>  rpc_api_pipe: fnum:4000
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=154
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=5
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   72 (0x48)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   72 (0x48)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=16384 (0x4000)
>  smb_bcc=87
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 0B 03 10 00 00 00 48  00 00 00 01 00 00 00 B8  .......H .......¸
>  [020] 10 B8 10 00 00 00 00 01  00 00 00 00 00 01 00 78  .¸...... .......x
>  [030] 56 34 12 34 12 CD AB EF  00 01 23 45 67 CF FB 01  V4.4.Í«ï ..#EgÏû.
>  [040] 00 00 00 04 5D 88 8A EB  1C C9 11 9F E8 08 00 2B  ....]..ë .É..è..+
>  [050] 10 48 60 02 00 00 00                              .H`.... 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,158)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,158) wrote 158
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 124
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=5
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00  ........ .D......
>  [010] 00 B8 10 B8 10 0D 57 26  01 0C 00 5C 50 49 50 45  .¸.¸..W& ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  00 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..ë.É ..è..+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=5
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00  ........ .D......
>  [010] 00 B8 10 B8 10 0D 57 26  01 0C 00 5C 50 49 50 45  .¸.¸..W& ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  00 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..ë.É ..è..+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 68
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 0c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0044
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483)
>  rpc_api_pipe: len left: 0 smbtrans read: 68
>[2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525)
>  rpc_api_pipe: fragment first and last both set
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_pipe_bind(1381)
>  rpc_pipe_bind: rpc_api_pipe returned OK.
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_ba 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000010 smb_io_rpc_hdr_bba 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0010 max_tsize: 10b8
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0012 max_rsize: 10b8
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0014 assoc_gid: 0126570d
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_rpc_addr_str 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0018 len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>          001a str: \PIPE\lsass.
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000026 smb_io_rpc_results 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>          0028 num_results: 01
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          002c result     : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          002e reason     : 0000
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000030 smb_io_rpc_iface 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000030 smb_io_uuid uuid
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0030 data   : 8a885d04
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0034 data   : 1ceb
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0036 data   : 11c9
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0038 data   : 9f e8 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              003a data   : 08 00 2b 10 48 60 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0040 version: 00000002
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:check_bind_response(1257)
>  bind_rpc_pipe: accepted!
>[2004/05/29 21:29:45, 4, pid=25784] rpc_client/cli_netlogon.c:cli_net_req_chal(45)
>  cli_net_req_chal: LSA Request Challenge from CANON to LAGOON: 46D9822322981BA9
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_q_req_chal(621)
>  init_q_req_chal: 621
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_q_req_chal(630)
>  init_q_req_chal: 630
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 net_io_q_req_chal 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0000 undoc_buffer: 00000001
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000004 smb_io_unistr2 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0004 uni_max_len: 00000009
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0008 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          000c uni_str_len: 00000009
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>          0010 buffer     : \.\.L.A.G.O.O.N...
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000022 smb_io_unistr2 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0024 uni_max_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0028 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          002c uni_str_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>          0030 buffer     : C.A.N.O.N...
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      00003c smb_io_chal 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>          003c data: 46 d9 82 23 22 98 1b a9 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(841)
>  create_rpc_request: opnum: 0x4 data_len: 0x5c
>[2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(858)
>  create_rpc_request: data_len: 5c auth_len: 0 alloc_hint: 4c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr    
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 005c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000002
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0010 alloc_hint: 0000004c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0014 context_id: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0016 opnum     : 0004
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410)
>  rpc_api_pipe: fnum:4000
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=174
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=6
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   92 (0x5C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   92 (0x5C)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=16384 (0x4000)
>  smb_bcc=107
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 5C  00 00 00 02 00 00 00 4C  .......\ .......L
>  [020] 00 00 00 00 00 04 00 01  00 00 00 09 00 00 00 00  ........ ........
>  [030] 00 00 00 09 00 00 00 5C  00 5C 00 4C 00 41 00 47  .......\ .\.L.A.G
>  [040] 00 4F 00 4F 00 4E 00 00  00 00 00 06 00 00 00 00  .O.O.N.. ........
>  [050] 00 00 00 06 00 00 00 43  00 41 00 4E 00 4F 00 4E  .......C .A.N.O.N
>  [060] 00 00 00 46 D9 82 23 22  98 1B A9                 ...FÙ.#" ..©
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,178)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,178) wrote 178
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 92
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=92
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   36 (0x24)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   36 (0x24)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=37
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 02 03 10 00 00  00 24 00 00 00 02 00 00  ........ .$......
>  [010] 00 0C 00 00 00 00 00 00  00 46 8C 84 7C 5E 98 06  ........ .F..|^..
>  [020] 68 00 00 00 00                                    h.... 
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=92
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   36 (0x24)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   36 (0x24)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=37
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 02 03 10 00 00  00 24 00 00 00 02 00 00  ........ .$......
>  [010] 00 0C 00 00 00 00 00 00  00 46 8C 84 7C 5E 98 06  ........ .F..|^..
>  [020] 68 00 00 00 00                                    h.... 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 36
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 02
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0024
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000002
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0010 alloc_hint: 0000000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0014 context_id: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0016 cancel_ct : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0017 reserved  : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483)
>  rpc_api_pipe: len left: 0 smbtrans read: 36
>[2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525)
>  rpc_api_pipe: fragment first and last both set
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000018 net_io_r_req_chal 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_chal 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>          0018 data: 46 8c 84 7c 5e 98 06 68 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_ntstatus(665)
>      0020 status: NT_STATUS_OK
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_session_key(59)
>  cred_session_key
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_session_key(61)
>  	clnt_chal: 46D9822322981BA9
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_session_key(62)
>  	srv_chal : 468C847C5E980668
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_session_key(63)
>  	clnt+srv : 8C6507A080302211
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_session_key(64)
>  	sess_key : 697D9E5A8F985D1A
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_create(90)
>  cred_create
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(92)
>  	sess_key : 697D9E5A8F985D1A
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(93)
>  	stor_cred: 46D9822322981BA9
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(94)
>  	timestamp: 0
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(95)
>  	timecred : 46D9822322981BA9
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(96)
>  	calc_cred: 64A5EC4A228AB957
>[2004/05/29 21:29:45, 4, pid=25784] rpc_client/cli_netlogon.c:cli_net_auth2(102)
>  cli_net_auth2: srv:\\LAGOON acct:CANON$ sc:2 mc: CANON chal 64A5EC4A228AB957 neg: 400701ff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_q_auth_2(742)
>  init_q_auth_2: 742
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_misc.c:init_log_info(1336)
>  make_log_info 1336
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_q_auth_2(748)
>  init_q_auth_2: 748
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 net_io_q_auth_2 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_log_info 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0000 undoc_buffer: 00000001
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000004 smb_io_unistr2 unistr2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0004 uni_max_len: 00000009
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0008 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              000c uni_str_len: 00000009
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>              0010 buffer     : \.\.L.A.G.O.O.N...
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000022 smb_io_unistr2 unistr2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0024 uni_max_len: 00000007
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0028 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              002c uni_str_len: 00000007
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>              0030 buffer     : C.A.N.O.N.$...
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          003e sec_chan: 0002
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000040 smb_io_unistr2 unistr2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0040 uni_max_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0044 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0048 uni_str_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>              004c buffer     : C.A.N.O.N...
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000058 smb_io_chal 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>          0058 data: 64 a5 ec 4a 22 8a b9 57 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000060 net_io_neg_flags 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0060 neg_flags: 400701ff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(841)
>  create_rpc_request: opnum: 0xf data_len: 0x7c
>[2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(858)
>  create_rpc_request: data_len: 7c auth_len: 0 alloc_hint: 6c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr    
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 007c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000003
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0010 alloc_hint: 0000006c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0014 context_id: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0016 opnum     : 000f
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410)
>  rpc_api_pipe: fnum:4000
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=206
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=7
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  124 (0x7C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=  124 (0x7C)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=16384 (0x4000)
>  smb_bcc=139
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 7C  00 00 00 03 00 00 00 6C  .......| .......l
>  [020] 00 00 00 00 00 0F 00 01  00 00 00 09 00 00 00 00  ........ ........
>  [030] 00 00 00 09 00 00 00 5C  00 5C 00 4C 00 41 00 47  .......\ .\.L.A.G
>  [040] 00 4F 00 4F 00 4E 00 00  00 00 00 07 00 00 00 00  .O.O.N.. ........
>  [050] 00 00 00 07 00 00 00 43  00 41 00 4E 00 4F 00 4E  .......C .A.N.O.N
>  [060] 00 24 00 00 00 02 00 06  00 00 00 00 00 00 00 06  .$...... ........
>  [070] 00 00 00 43 00 41 00 4E  00 4F 00 4E 00 00 00 64  ...C.A.N .O.N...d
>  [080] A5 EC 4A 22 8A B9 57 FF  01 07 40                 ¥ìJ".¹Wÿ ..@
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,210)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,210) wrote 210
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 96
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 02 03 10 00 00  00 28 00 00 00 03 00 00  ........ .(......
>  [010] 00 10 00 00 00 00 00 00  00 EE 13 21 63 E9 BB 0C  ........ .î.!cé».
>  [020] E8 FF 01 07 40 00 00 00  00                       èÿ..@... .
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 02 03 10 00 00  00 28 00 00 00 03 00 00  ........ .(......
>  [010] 00 10 00 00 00 00 00 00  00 EE 13 21 63 E9 BB 0C  ........ .î.!cé».
>  [020] E8 FF 01 07 40 00 00 00  00                       èÿ..@... .
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 40
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 02
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0028
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000003
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0010 alloc_hint: 00000010
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0014 context_id: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0016 cancel_ct : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0017 reserved  : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483)
>  rpc_api_pipe: len left: 0 smbtrans read: 40
>[2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525)
>  rpc_api_pipe: fragment first and last both set
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000018 net_io_r_auth_2 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_chal 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>          0018 data: ee 13 21 63 e9 bb 0c e8 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000020 net_io_neg_flags 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0020 neg_flags: 400701ff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_ntstatus(665)
>      0024 status: NT_STATUS_OK
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_create(90)
>  cred_create
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(92)
>  	sess_key : 697D9E5A8F985D1A
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(93)
>  	stor_cred: 468C847C5E980668
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(94)
>  	timestamp: 0
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(95)
>  	timecred : 468C847C5E980668
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(96)
>  	calc_cred: EE132163E9BB0CE8
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_assert(121)
>  cred_assert
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_assert(123)
>  	challenge : EE132163E9BB0CE8
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_assert(124)
>  	calculated: EE132163E9BB0CE8
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_assert(128)
>  credentials check ok
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,108)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,108) wrote 108
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 103
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=8
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  103 (0x67)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]=  320 (0x140)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=   16 (0x10)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_pipe_bind(1305)
>  Bind RPC Pipe[4001]: \PIPE\NETLOGON
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:valid_pipe_name(1203)
>  Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB  EF 00 01 23 45 67 CF FB  xV4.4.Í« ï..#EgÏû
>  [010] 01 00 00 00                                       .... 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:valid_pipe_name(1206)
>  Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11  9F E8 08 00 2B 10 48 60  .]..ë.É. .è..+.H`
>  [010] 02 00 00 00                                       .... 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_auth hdr_auth
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 auth_type    : 44
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 auth_level   : 06
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 padding      : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 reserved     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0004 auth_context : 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000008 smb_io_rpc_auth_netsec_neg netsec_neg
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0008 type1: 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c type2: 00000003
>[2004/05/29 21:29:45, 6, pid=25784] lib/util.c:dump_data(1864)
>  [000] 4E 45 42 55 4C 41                                 NEBULA 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util.c:dump_data(1864)
>  [000] 43 41 4E 4F 4E                                    CANON 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 0b
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0065
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0015
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000004
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_rb 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000010 smb_io_rpc_hdr_bba 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0010 max_tsize: 10b8
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0012 max_rsize: 10b8
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0014 assoc_gid: 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0018 num_elements: 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      001c context_id  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      001e num_syntaxes: 01
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      00001f smb_io_rpc_iface 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000020 smb_io_uuid uuid
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0020 data   : 12345678
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0024 data   : 1234
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0026 data   : abcd
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0028 data   : ef 00 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              002a data   : 01 23 45 67 cf fb 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0030 version: 00000001
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000034 smb_io_rpc_iface 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000034 smb_io_uuid uuid
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0034 data   : 8a885d04
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0038 data   : 1ceb
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              003a data   : 11c9
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              003c data   : 9f e8 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              003e data   : 08 00 2b 10 48 60 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0044 version: 00000002
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410)
>  rpc_api_pipe: fnum:4001
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=183
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=9
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  101 (0x65)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=  101 (0x65)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=16385 (0x4001)
>  smb_bcc=116
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 0B 03 10 00 00 00 65  00 15 00 04 00 00 00 B8  .......e .......¸
>  [020] 10 B8 10 00 00 00 00 01  00 00 00 00 00 01 00 78  .¸...... .......x
>  [030] 56 34 12 34 12 CD AB EF  00 01 23 45 67 CF FB 01  V4.4.Í«ï ..#EgÏû.
>  [040] 00 00 00 04 5D 88 8A EB  1C C9 11 9F E8 08 00 2B  ....]..ë .É..è..+
>  [050] 10 48 60 02 00 00 00 44  06 00 00 01 00 00 00 00  .H`....D ........
>  [060] 00 00 00 03 00 00 00 4E  45 42 55 4C 41 00 43 41  .......N EBULA.CA
>  [070] 4E 4F 4E 00                                       NON. 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,187)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,187) wrote 187
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 144
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=9
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   88 (0x58)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=89
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 0C 03 10 00 00  00 58 00 0C 00 04 00 00  ........ .X......
>  [010] 00 B8 10 B8 10 0E 57 26  01 0C 00 5C 50 49 50 45  .¸.¸..W& ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  00 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..ë.É ..è..+.H
>  [040] 60 02 00 00 00 44 06 00  00 01 00 00 00 01 00 00  `....D.. ........
>  [050] 00 00 00 00 00 00 00 54  00                       .......T .
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=9
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   88 (0x58)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=89
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 0C 03 10 00 00  00 58 00 0C 00 04 00 00  ........ .X......
>  [010] 00 B8 10 B8 10 0E 57 26  01 0C 00 5C 50 49 50 45  .¸.¸..W& ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  00 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..ë.É ..è..+.H
>  [040] 60 02 00 00 00 44 06 00  00 01 00 00 00 01 00 00  `....D.. ........
>  [050] 00 00 00 00 00 00 00 54  00                       .......T .
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 88
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 0c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0058
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000004
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483)
>  rpc_api_pipe: len left: 0 smbtrans read: 88
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
>  rpc_auth_pipe: pkt_type: 12 len: 88 auth_len: 12 NTLMSSP No schannel Yes sign Yes seal Yes 
>[2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
>  rpc_auth_pipe: packet:
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_auth auth_hdr
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 auth_type    : 44
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 auth_level   : 06
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 padding      : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 reserved     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0004 auth_context : 00000001
>[2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525)
>  rpc_api_pipe: fragment first and last both set
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_pipe_bind(1381)
>  rpc_pipe_bind: rpc_api_pipe returned OK.
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_ba 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000010 smb_io_rpc_hdr_bba 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0010 max_tsize: 10b8
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0012 max_rsize: 10b8
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0014 assoc_gid: 0126570e
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_rpc_addr_str 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0018 len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>          001a str: \PIPE\lsass.
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000026 smb_io_rpc_results 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>          0028 num_results: 01
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          002c result     : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          002e reason     : 0000
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000030 smb_io_rpc_iface 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000030 smb_io_uuid uuid
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0030 data   : 8a885d04
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0034 data   : 1ceb
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0036 data   : 11c9
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0038 data   : 9f e8 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              003a data   : 08 00 2b 10 48 60 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0040 version: 00000002
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:check_bind_response(1257)
>  bind_rpc_pipe: accepted!
>[2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_create(90)
>  cred_create
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(92)
>  	sess_key : 697D9E5A8F985D1A
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(93)
>  	stor_cred: 64A5EC4A228AB957
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(94)
>  	timestamp: 40b96339
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(95)
>  	timecred : 9D08A68B228AB957
>[2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(96)
>  	calc_cred: 893AD686CDC190EB
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_id_info2(1125)
>  init_id_info2: 1125
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_misc.c:init_logon_id(1515)
>  make_logon_id: 1515
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_sam_info(1231)
>  init_sam_info: 1231
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_misc.c:init_clnt_info2(1430)
>  make_clnt_info: 1430
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_misc.c:init_clnt_srv(1275)
>  init_clnt_srv: 1275
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 net_io_q_sam_logon 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_sam_info 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000000 smb_io_clnt_info2 
>[2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>              000000 smb_io_clnt_srv 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0000 undoc_buffer : 00000001
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  000004 smb_io_unistr2 unistr2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0004 uni_max_len: 00000009
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0008 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      000c uni_str_len: 00000009
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                      0010 buffer     : \.\.L.A.G.O.O.N...
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0024 undoc_buffer2: 00000001
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  000028 smb_io_unistr2 unistr2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0028 uni_max_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      002c offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0030 uni_str_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                      0034 buffer     : C.A.N.O.N...
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0040 ptr_cred: 00000001
>[2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>              000044 smb_io_cred 
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  000044 smb_io_chal 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>                      0044 data: 89 3a d6 86 cd c1 90 eb 
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  00004c smb_io_utime 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      004c time: 40b96339
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0050 ptr_rtn_cred : 00000001
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000054 smb_io_cred 
>[2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>              000054 smb_io_chal 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>                  0054 data: 00 00 00 00 00 00 00 00 
>[2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>              00005c smb_io_utime 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                  005c time: 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0060 logon_level  : 0002
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000062 smb_io_sam_info logon_info
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0062 switch_value : 0002
>[2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>              000064 net_io_id_info2 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0064 ptr_id_info2: 00000001
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  000068 smb_io_unihdr unihdr
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      0068 uni_str_len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      006a uni_max_len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      006c buffer     : 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0070 param_ctrl: 00000000
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  000074 smb_io_logon_id 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0074 low : 0000dead
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0078 high: 0000beef
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  00007c smb_io_unihdr unihdr
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      007c uni_str_len: 000a
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      007e uni_max_len: 000a
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0080 buffer     : 00000001
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  000084 smb_io_unihdr unihdr
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      0084 uni_str_len: 0016
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      0086 uni_max_len: 0016
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0088 buffer     : 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>                  008c lm_chal: f7 45 18 e1 aa 9a a2 96 
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  000094 smb_io_strhdr hdr_nt_chal_resp
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      0094 str_str_len: 0018
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      0096 str_max_len: 0018
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0098 buffer     : 00000001
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  00009c smb_io_strhdr hdr_lm_chal_resp
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      009c str_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>                      009e str_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00a0 buffer     : 00000000
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000a4 smb_io_unistr2 uni_domain_name
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00a4 uni_max_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00a8 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00ac uni_str_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                      00b0 buffer     : N.E.B.U.L.A.
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000bc smb_io_unistr2 uni_user_name  
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00bc uni_max_len: 00000005
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00c0 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00c4 uni_str_len: 00000005
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                      00c8 buffer     : e.r.i.c.h.
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000d2 smb_io_unistr2 uni_wksta_name 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00d4 uni_max_len: 0000000b
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00d8 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00dc uni_str_len: 0000000b
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                      00e0 buffer     : \.\.K.L.E.E.N.E.X._.Q.
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000f6 smb_io_string2 nt_chal_resp
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00f8 str_max_len: 00000018
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      00fc offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0100 str_str_len: 00000018
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_string2(961)
>                      0104 buffer     : .%$õ.Ü..{..ÎA..ç(a.º.å8.
>[2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>                  00011c smb_io_string2 - NULL lm_chal_resp
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      011c validation_level: 0003
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000120 smb_io_rpc_hdr_auth hdr_auth
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0120 auth_type    : 44
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0121 auth_level   : 06
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0122 padding      : 02
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0123 reserved     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0124 auth_context : 00000001
>[2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe_req(1023)
>  SCHANNEL seq_num=0
>[2004/05/29 21:29:45, 10, pid=25784] rpc_parse/parse_prs.c:netsec_encode(1462)
>  SCHANNEL: netsec_encode seq_num=0 data_len=288
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000128 smb_io_rpc_auth_netsec_chk 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0128 sig  : 77 00 7a 00 ff ff 00 00 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0130 seq_num: 19 b2 fa ec b9 af ad 90 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0138 packet_digest: 1a 24 44 ab bc 1c e5 8e 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0140 confounder: c0 8f db 92 4e af ad 4b 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(841)
>  create_rpc_request: opnum: 0x2 data_len: 0x160
>[2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(858)
>  create_rpc_request: data_len: 160 auth_len: 20 alloc_hint: 128
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr    
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0160
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0020
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000005
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0010 alloc_hint: 00000128
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0014 context_id: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0016 opnum     : 0002
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410)
>  rpc_api_pipe: fnum:4001
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=434
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=10
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  352 (0x160)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=  352 (0x160)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=16385 (0x4001)
>  smb_bcc=367
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
>  [010] 00 00 03 10 00 00 00 60  01 20 00 05 00 00 00 28  .......` . .....(
>  [020] 01 00 00 00 00 02 00 21  26 D8 61 3A 6E 1E 88 AB  .......! &Øa:n..«
>  [030] BC 5A 28 3A 8B A4 B8 BB  EA AA F8 A6 41 92 CD 26  ¼Z(:.¤¸» êªø¦A.Í&
>  [040] 5C D5 48 88 1B B9 55 6F  F9 AF 73 24 69 6B 23 9C  \ÕH..¹Uo ù¯s$ik#.
>  [050] D3 B3 CB D5 45 10 A3 5B  4B 13 E3 93 0C C0 78 FC  Ó³ËÕE.£[ K.ã..Àxü
>  [060] 2C BF CC 86 E9 2E 55 CC  15 19 66 3D 09 1E EF A2  ,¿Ì.é.UÌ ..f=..ï¢
>  [070] 50 C0 57 9B 94 CF 76 82  91 AD 61 F5 05 07 82 63  PÀW..Ïv. .aõ...c
>  [080] 2C 2C CD 62 97 E5 75 FB  C3 D1 11 D5 25 93 D4 CD  ,,Íb.åuû ÃÑ.Õ%.ÔÍ
>  [090] 72 FE 5F 74 9A 20 79 73  35 2E 86 C7 D2 F1 92 6F  rþ_t. ys 5..ÇÒñ.o
>  [0A0] A2 EA EF 13 2D DA AC DC  88 61 CA F0 F1 41 50 48  ¢êï.-Ú¬Ü .aÊðñAPH
>  [0B0] BD 72 3A 3B 9C C3 CF C5  E7 2B D5 76 03 40 3F C4  ½r:;.ÃÏÅ ç+Õv.@?Ä
>  [0C0] E3 D4 CF 03 AE 67 4B 81  94 1F 4D AE D3 D8 A8 9C  ãÔÏ.®gK. ..M®ÓØ¨.
>  [0D0] 5A 82 BB FC 19 BF 0B E6  AD C3 3B E7 B5 F6 C7 C2  Z.»ü.¿.æ Ã;çµöÇÂ
>  [0E0] 54 07 10 62 6D D1 7B F4  50 73 7A 2B 83 53 4A 2C  T..bmÑ{ô Psz+.SJ,
>  [0F0] 61 56 C7 5C 6E 37 60 9A  31 09 E7 22 73 8F 85 5B  aVÇ\n7`. 1.ç"s..[
>  [100] CC 99 CE 99 22 44 63 28  AD 7C 8B A9 49 FF E6 A3  Ì.Î."Dc( |.©Iÿæ£
>  [110] 52 C1 36 20 AD 8A 85 59  1E 24 2C F3 99 40 0F 75  RÁ6 ..Y .$,ó.@.u
>  [120] 33 A3 8A BB 7C BC 2D 1B  A1 8F 59 95 E7 EF FC 72  3£.»|¼-. ¡.Y.çïür
>  [130] C7 B6 23 C5 96 1A EE 44  4C 3B F8 E1 0D 45 43 D6  Ç¶#Å..îD L;øá.ECÖ
>  [140] 9E EE BE 84 6B 16 4D 44  06 02 00 01 00 00 00 77  .î¾.k.MD .......w
>  [150] 00 7A 00 FF FF 00 00 19  B2 FA EC B9 AF AD 90 1A  .z.ÿÿ... ²úì¹¯..
>  [160] 24 44 AB BC 1C E5 8E C0  8F DB 92 4E AF AD 4B     $D«¼.å.À .Û.N¯K
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,438)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,438) wrote 438
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 616
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=616
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=10
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  560 (0x230)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  560 (0x230)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=561
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 02 03 10 00 00  00 30 02 20 00 05 00 00  ........ .0. ....
>  [010] 00 E4 01 00 00 00 00 00  00 E9 69 CA 87 D5 F5 22  .ä...... .éiÊ.Õõ"
>  [020] 56 50 CC 34 4D D0 6C B8  04 A4 99 4E B9 8B E1 21  VPÌ4MÐl¸ .¤.N¹.á!
>  [030] 29 5F 79 83 40 07 F4 DB  4B 69 CE 87 CF D4 81 51  )_y.@.ôÛ KiÎ.ÏÔ.Q
>  [040] 3F C0 16 EB 20 BD BD A9  D9 A2 9B BC 8F 14 84 C7  ?À.ë ½½© Ù¢.¼...Ç
>  [050] DE 14 8E 2D A2 1D E3 49  1B A0 5C EB B6 61 77 01  Þ..-¢.ãI . \ë¶aw.
>  [060] 18 43 DE A4 7F E3 E9 B0  5E 1C 22 2A 17 FF 7B 71  .CÞ¤.ãé° ^."*.ÿ{q
>  [070] B0 E4 AA 11 72 9C D7 64  67 4D C2 9E D7 EB D3 CC  °äª.r.×d gMÂ.×ëÓÌ
>  [080] 57 C8 6A 50 0A 4D 0F A9  E3 8D 8A 63 84 70 3C 41  WÈjP.M.© ã..c.p<A
>  [090] 59 35 2B C6 04 D0 E7 D3  F1 5C 43 84 82 00 CA 32  Y5+Æ.ÐçÓ ñ\C...Ê2
>  [0A0] 13 75 22 AE 64 A0 33 B8  BC 20 85 2E 67 05 D2 97  .u"®d 3¸ ¼ ..g.Ò.
>  [0B0] 8A DA 80 BA 69 CA 65 35  CB 2C 45 83 53 05 77 57  .Ú.ºiÊe5 Ë,E.S.wW
>  [0C0] FA EE A2 85 5D 38 41 F5  11 38 D8 79 33 0C 17 BC  úî¢.]8Aõ .8Øy3..¼
>  [0D0] 22 69 FE 7A FA 15 B4 EC  2C 4A 1C 83 D0 4A 1B 8D  "iþzú.´ì ,J..ÐJ..
>  [0E0] 26 22 6F EE 7C B6 F4 64  4E 0F 3E 0F F2 35 6D 28  &"oî|¶ôd N.>.ò5m(
>  [0F0] 1A EB 26 66 5B CA 59 84  BE 97 A9 53 EB 19 CB 25  .ë&f[ÊY. ¾.©Së.Ë%
>  [100] F5 DA 7F 5B A5 16 DC FE  C4 80 FF A2 DF B0 B3 C1  õÚ.[¥.Üþ Ä.ÿ¢ß°³Á
>  [110] 75 85 79 53 94 22 D9 1F  58 73 8D A3 73 AA C5 DA  u.yS."Ù. Xs.£sªÅÚ
>  [120] 1F 7F 8E 1E 88 CD 64 A5  65 93 8D A8 9A 6F 8A C8  .....Íd¥ e..¨.o.È
>  [130] ED 79 1E 02 27 90 6B D4  47 1A BC 80 EF D1 2E C7  íy..'.kÔ G.¼.ïÑ.Ç
>  [140] 22 01 5D 9B 4D 51 9F 7C  D1 FE 2D DD B6 3F D9 FF  ".].MQ.| Ñþ-Ý¶?Ùÿ
>  [150] CC 12 90 B3 6F 7C 56 7C  F9 62 C3 2D 79 4B 9B 42  Ì..³o|V| ùbÃ-yK.B
>  [160] F4 3C 6B F2 02 3B 9A F7  88 EB 4E C2 DF EC D1 43  ô<kò.;.÷ .ëNÂßìÑC
>  [170] AE 19 34 71 D8 68 25 49  C5 EE 6F 3D 23 B5 4D 4B  ®.4qØh%I Åîo=#µMK
>  [180] 08 5C 3F 49 5B F7 F0 29  68 CA F9 83 3A 62 3D D1  .\?I[÷ð) hÊù.:b=Ñ
>  [190] D6 66 DE C4 26 40 29 A7  F6 9F 55 9E DC EE CE 07  ÖfÞÄ&@)§ ö.U.ÜîÎ.
>  [1A0] 72 A4 4A 0D 48 33 8E F4  E6 00 AB 45 8B 1A 33 B6  r¤J.H3.ô æ.«E..3¶
>  [1B0] D2 8C 1D EF EB 56 58 AF  CB 05 2B 01 BD 77 35 5C  Ò..ïëVX¯ Ë.+.½w5\
>  [1C0] 22 2D FC D2 10 27 F2 19  05 39 F7 B4 E4 AE EB 55  "-üÒ.'ò. .9÷´ä®ëU
>  [1D0] BC 0F 3B 1A AF 4E 09 74  39 BC 33 1E 6C 84 FA CE  ¼.;.¯N.t 9¼3.l.úÎ
>  [1E0] DA 74 D9 71 FD C4 64 A9  50 D7 41 E1 CA 26 17 94  ÚtÙqýÄd© P×AáÊ&..
>  [1F0] 24 9A 56 1D CF F3 06 C3  0F 93 E5 5D 1D DE 63 F3  $.V.Ïó.Ã ..å].Þcó
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=616
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=10
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  560 (0x230)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  560 (0x230)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=561
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 05 00 02 03 10 00 00  00 30 02 20 00 05 00 00  ........ .0. ....
>  [010] 00 E4 01 00 00 00 00 00  00 E9 69 CA 87 D5 F5 22  .ä...... .éiÊ.Õõ"
>  [020] 56 50 CC 34 4D D0 6C B8  04 A4 99 4E B9 8B E1 21  VPÌ4MÐl¸ .¤.N¹.á!
>  [030] 29 5F 79 83 40 07 F4 DB  4B 69 CE 87 CF D4 81 51  )_y.@.ôÛ KiÎ.ÏÔ.Q
>  [040] 3F C0 16 EB 20 BD BD A9  D9 A2 9B BC 8F 14 84 C7  ?À.ë ½½© Ù¢.¼...Ç
>  [050] DE 14 8E 2D A2 1D E3 49  1B A0 5C EB B6 61 77 01  Þ..-¢.ãI . \ë¶aw.
>  [060] 18 43 DE A4 7F E3 E9 B0  5E 1C 22 2A 17 FF 7B 71  .CÞ¤.ãé° ^."*.ÿ{q
>  [070] B0 E4 AA 11 72 9C D7 64  67 4D C2 9E D7 EB D3 CC  °äª.r.×d gMÂ.×ëÓÌ
>  [080] 57 C8 6A 50 0A 4D 0F A9  E3 8D 8A 63 84 70 3C 41  WÈjP.M.© ã..c.p<A
>  [090] 59 35 2B C6 04 D0 E7 D3  F1 5C 43 84 82 00 CA 32  Y5+Æ.ÐçÓ ñ\C...Ê2
>  [0A0] 13 75 22 AE 64 A0 33 B8  BC 20 85 2E 67 05 D2 97  .u"®d 3¸ ¼ ..g.Ò.
>  [0B0] 8A DA 80 BA 69 CA 65 35  CB 2C 45 83 53 05 77 57  .Ú.ºiÊe5 Ë,E.S.wW
>  [0C0] FA EE A2 85 5D 38 41 F5  11 38 D8 79 33 0C 17 BC  úî¢.]8Aõ .8Øy3..¼
>  [0D0] 22 69 FE 7A FA 15 B4 EC  2C 4A 1C 83 D0 4A 1B 8D  "iþzú.´ì ,J..ÐJ..
>  [0E0] 26 22 6F EE 7C B6 F4 64  4E 0F 3E 0F F2 35 6D 28  &"oî|¶ôd N.>.ò5m(
>  [0F0] 1A EB 26 66 5B CA 59 84  BE 97 A9 53 EB 19 CB 25  .ë&f[ÊY. ¾.©Së.Ë%
>  [100] F5 DA 7F 5B A5 16 DC FE  C4 80 FF A2 DF B0 B3 C1  õÚ.[¥.Üþ Ä.ÿ¢ß°³Á
>  [110] 75 85 79 53 94 22 D9 1F  58 73 8D A3 73 AA C5 DA  u.yS."Ù. Xs.£sªÅÚ
>  [120] 1F 7F 8E 1E 88 CD 64 A5  65 93 8D A8 9A 6F 8A C8  .....Íd¥ e..¨.o.È
>  [130] ED 79 1E 02 27 90 6B D4  47 1A BC 80 EF D1 2E C7  íy..'.kÔ G.¼.ïÑ.Ç
>  [140] 22 01 5D 9B 4D 51 9F 7C  D1 FE 2D DD B6 3F D9 FF  ".].MQ.| Ñþ-Ý¶?Ùÿ
>  [150] CC 12 90 B3 6F 7C 56 7C  F9 62 C3 2D 79 4B 9B 42  Ì..³o|V| ùbÃ-yK.B
>  [160] F4 3C 6B F2 02 3B 9A F7  88 EB 4E C2 DF EC D1 43  ô<kò.;.÷ .ëNÂßìÑC
>  [170] AE 19 34 71 D8 68 25 49  C5 EE 6F 3D 23 B5 4D 4B  ®.4qØh%I Åîo=#µMK
>  [180] 08 5C 3F 49 5B F7 F0 29  68 CA F9 83 3A 62 3D D1  .\?I[÷ð) hÊù.:b=Ñ
>  [190] D6 66 DE C4 26 40 29 A7  F6 9F 55 9E DC EE CE 07  ÖfÞÄ&@)§ ö.U.ÜîÎ.
>  [1A0] 72 A4 4A 0D 48 33 8E F4  E6 00 AB 45 8B 1A 33 B6  r¤J.H3.ô æ.«E..3¶
>  [1B0] D2 8C 1D EF EB 56 58 AF  CB 05 2B 01 BD 77 35 5C  Ò..ïëVX¯ Ë.+.½w5\
>  [1C0] 22 2D FC D2 10 27 F2 19  05 39 F7 B4 E4 AE EB 55  "-üÒ.'ò. .9÷´ä®ëU
>  [1D0] BC 0F 3B 1A AF 4E 09 74  39 BC 33 1E 6C 84 FA CE  ¼.;.¯N.t 9¼3.l.úÎ
>  [1E0] DA 74 D9 71 FD C4 64 A9  50 D7 41 E1 CA 26 17 94  ÚtÙqýÄd© P×AáÊ&..
>  [1F0] 24 9A 56 1D CF F3 06 C3  0F 93 E5 5D 1D DE 63 F3  $.V.Ïó.Ã ..å].Þcó
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 560
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 02
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0230
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0020
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000005
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0010 alloc_hint: 000001e4
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0014 context_id: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0016 cancel_ct : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0017 reserved  : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483)
>  rpc_api_pipe: len left: 0 smbtrans read: 560
>[2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
>  rpc_auth_pipe: pkt_type: 2 len: 560 auth_len: 32 NTLMSSP No schannel Yes sign Yes seal Yes 
>[2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
>  rpc_auth_pipe: packet:
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_auth auth_hdr
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 auth_type    : 44
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 auth_level   : 06
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 padding      : 0c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 reserved     : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0004 auth_context : 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0008 sig  : 77 00 7a 00 ff ff 00 00 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0010 seq_num: 22 dd 2d d9 d7 89 27 c0 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0018 packet_digest: a4 c5 94 ba cd 33 9a 06 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0020 confounder: 1e 49 51 61 e6 1d 17 e3 
>[2004/05/29 21:29:45, 10, pid=25784] rpc_parse/parse_prs.c:netsec_decode(1539)
>  SCHANNEL: netsec_encode seq_num=1 data_len=496
>[2004/05/29 21:29:45, 10, pid=25784] rpc_parse/parse_prs.c:netsec_decode(1559)
>  SCHANNEL: netsec_decode seq_num=1 data_len=496
>[2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525)
>  rpc_api_pipe: fragment first and last both set
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000018 net_io_r_sam_logon 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0018 buffer_creds: 0b826b9c
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      00001c smb_io_cred 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          00001c smb_io_chal 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>              001c data: 8c b6 c5 6d 4e 64 39 9d 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000024 smb_io_utime 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0024 time: 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0028 switch_value: 0003
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      00002c net_io_user_info3 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          002c ptr_user_info : 2bb37270
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000030 smb_io_time logon time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0030 low : b3577a98
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0034 high: 01c445d1
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000038 smb_io_time logoff time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0038 low : ffffffff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              003c high: 7fffffff
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000040 smb_io_time kickoff time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0040 low : ffffffff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0044 high: 7fffffff
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000048 smb_io_time last set time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0048 low : 0bcb68a2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              004c high: 01c398ef
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000050 smb_io_time can change time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0050 low : 0bcb68a2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0054 high: 01c398ef
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000058 smb_io_time must change time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0058 low : ffffffff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              005c high: 7fffffff
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000060 smb_io_unihdr hdr_user_name
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0060 uni_str_len: 000a
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0062 uni_max_len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0064 buffer     : 2bb373e4
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000068 smb_io_unihdr hdr_full_name
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0068 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              006a uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              006c buffer     : 00000000
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000070 smb_io_unihdr hdr_logon_script
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0070 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0072 uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0074 buffer     : 00000000
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000078 smb_io_unihdr hdr_profile_path
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0078 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              007a uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              007c buffer     : 00000000
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000080 smb_io_unihdr hdr_home_dir
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0080 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0082 uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0084 buffer     : 00000000
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000088 smb_io_unihdr hdr_dir_drive
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              0088 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              008a uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              008c buffer     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0090 logon_count   : 08b0
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0092 bad_pw_count  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0094 user_rid      : 000003ec
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0098 group_rid     : 00000201
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          009c num_groups    : 00000012
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00a0 buffer_groups : 2bb3733c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00a4 user_flgs     : 00000120
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>          00a8 user_sess_key: c0 d7 0c 14 5b 1c 13 b3 03 37 bf bf c8 77 e9 82 
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          0000b8 smb_io_unihdr hdr_logon_srv
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              00b8 uni_str_len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              00ba uni_max_len: 000e
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              00bc buffer     : 2bb373f0
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          0000c0 smb_io_unihdr hdr_logon_dom
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              00c0 uni_str_len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>              00c2 uni_max_len: 000e
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c4 buffer     : 2bb373fe
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00c8 buffer_dom_id : 2bb373cc
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>          00cc padding       : 1a 50 61 e9 06 27 0f 56 10 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00f4 num_other_sids: 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00f8 buffer_other_sids: 00000000
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          0000fc smb_io_unistr2 uni_user_name
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              00fc uni_max_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0100 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0104 uni_str_len: 00000005
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>              0108 buffer     : e.r.i.c.h.
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000112 smb_io_unistr2 - NULL uni_full_name
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000112 smb_io_unistr2 - NULL uni_logon_script
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000112 smb_io_unistr2 - NULL uni_profile_path
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000112 smb_io_unistr2 - NULL uni_home_dir
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000112 smb_io_unistr2 - NULL uni_dir_drive
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0114 num_groups2   : 00000012
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000118 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0118 g_rid: 00001320
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              011c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000120 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0120 g_rid: 0000130a
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0124 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000128 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0128 g_rid: 000013fd
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              012c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000130 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0130 g_rid: 00001239
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0134 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000138 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0138 g_rid: 000012c6
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              013c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000140 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0140 g_rid: 000012c7
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0144 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000148 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0148 g_rid: 00001249
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              014c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000150 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0150 g_rid: 0000196a
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0154 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000158 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0158 g_rid: 00001268
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              015c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000160 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0160 g_rid: 00001251
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0164 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000168 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0168 g_rid: 00001385
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              016c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000170 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0170 g_rid: 000012de
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0174 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000178 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0178 g_rid: 00000201
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              017c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000180 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0180 g_rid: 00002030
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0184 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000188 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0188 g_rid: 00001848
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              018c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000190 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0190 g_rid: 00003d38
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0194 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          000198 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              0198 g_rid: 0000042f
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              019c attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          0001a0 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01a0 g_rid: 000012cf
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01a4 attr : 00000007
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          0001a8 smb_io_unistr2 uni_logon_srv
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01a8 uni_max_len: 00000007
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01ac offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01b0 uni_str_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>              01b4 buffer     : L.A.G.O.O.N.
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          0001c0 smb_io_unistr2 uni_logon_dom
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01c0 uni_max_len: 00000007
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01c4 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01c8 uni_str_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>              01cc buffer     : N.E.B.U.L.A.
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          0001d8 smb_io_dom_sid2 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>              01d8 num_auths: 00000004
>[2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>              0001dc smb_io_dom_sid sid
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>                  01dc sid_rev_num: 01
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>                  01dd num_auths  : 04
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>                  01de id_auth[0] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>                  01df id_auth[1] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>                  01e0 id_auth[2] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>                  01e1 id_auth[3] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>                  01e2 id_auth[4] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>                  01e3 id_auth[5] : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32s(862)
>                  01e4 sub_auths : 00000015 0125690f 1de85f7e 4a515a19 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      01f4 auth_resp   : 00000001
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_ntstatus(665)
>      01f8 status      : NT_STATUS_OK
>[2004/05/29 21:29:45, 10, pid=25784] passdb/secrets.c:secrets_named_mutex_release(716)
>  secrets_named_mutex: released mutex for LAGOON
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam(293)
>  Finding user NEBULA\erich
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is nebula\erich
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(230)
>  Trying _Get_Pwnam(), username as given is NEBULA\erich
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(239)
>  Trying _Get_Pwnam(), username as uppercase is NEBULA\ERICH
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(247)
>  Checking combinations of 0 uppercase letters in nebula\erich
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals didn't find user [NEBULA\erich]!
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam(293)
>  Finding user erich
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is erich
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [erich]!
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:fill_sam_account(960)
>  fill_sam_account: located username was [erich]
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_username(612)
>  pdb_set_username: setting username erich, was 
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 12 -> now SET
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_fullname(693)
>  pdb_set_full_name: setting full name Eric Horst, was 
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 13 -> now SET
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_unix_homedir(828)
>  pdb_set_unix_homedir: setting home dir /usr/users/erich, was NULL
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 22 -> now SET
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_domain(639)
>  pdb_set_domain: setting domain CANON, was 
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_user_sid(539)
>  pdb_set_user_sid: setting user sid S-1-5-21-2072067240-3800136619-3437914000-9130
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 18 -> now SET
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2072067240-3800136619-3437914000-9130 from rid 9130
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_group_sid(575)
>  pdb_set_group_sid: setting group sid S-1-5-21-2072067240-3800136619-3437914000-1031
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 19 -> now SET
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
>  pdb_set_group_sid_from_rid:
>  	setting group sid S-1-5-21-2072067240-3800136619-3437914000-1031 from rid 1031
>[2004/05/29 21:29:45, 4, pid=25784] lib/substitute.c:automount_server(323)
>  Home server: canon
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_profile_path(747)
>  pdb_set_profile_path: setting profile path \\canon\erich\profile, was 
>[2004/05/29 21:29:45, 4, pid=25784] lib/substitute.c:automount_server(323)
>  Home server: canon
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_homedir(801)
>  pdb_set_homedir: setting home dir \\canon\erich, was 
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_dir_drive(774)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_logon_script(720)
>  pdb_set_logon_script: setting logon script , was 
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_nt_username(666)
>  pdb_set_nt_username: setting nt username erich, was 
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_username(612)
>  pdb_set_username: setting username erich, was erich
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_domain(639)
>  pdb_set_domain: setting domain NEBULA, was CANON
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_user_sid(539)
>  pdb_set_user_sid: setting user sid S-1-5-21-19228943-501768062-1246845465-1004
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_group_sid(575)
>  pdb_set_group_sid: setting group sid S-1-5-21-19228943-501768062-1246845465-513
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_fullname(693)
>  pdb_set_full_name: setting full name , was Eric Horst
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_logon_script(720)
>  pdb_set_logon_script: setting logon script , was 
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_profile_path(747)
>  pdb_set_profile_path: setting profile path , was \\canon\erich\profile
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_homedir(801)
>  pdb_set_homedir: setting home dir , was \\canon\erich
>[2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_dir_drive(774)
>  pdb_set_dir_drive: setting dir drive , was 
>[2004/05/29 21:29:45, 10, pid=25784] lib/system_smbd.c:sys_getgrouplist(117)
>  sys_getgrouplist: user [erich]
>[2004/05/29 21:29:45, 10, pid=25784] lib/system_smbd.c:sys_getgrouplist(126)
>  sys_getgrouplist(): disabled winbindd for group lookup [user == erich]
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 8, pid=25784] lib/util_getent.c:remove_duplicate_gids(330)
>  remove_duplicate_gids: Enter 17 gids
>[2004/05/29 21:29:45, 8, pid=25784] lib/util_getent.c:remove_duplicate_gids(348)
>  remove_duplicate_gids: Exit 16 gids
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 0 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (0) -> SID S-1-5-21-2072067240-3800136619-3437914000-1001.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 0 -> S-1-5-21-2072067240-3800136619-3437914000-1001
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 10 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (10) -> SID S-1-5-21-2072067240-3800136619-3437914000-1021.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 10 -> S-1-5-21-2072067240-3800136619-3437914000-1021
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 15 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (15) -> SID S-1-5-21-2072067240-3800136619-3437914000-1031.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 15 -> S-1-5-21-2072067240-3800136619-3437914000-1031
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 25 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (25) -> SID S-1-5-21-2072067240-3800136619-3437914000-1051.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 25 -> S-1-5-21-2072067240-3800136619-3437914000-1051
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 34 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (34) -> SID S-1-5-21-2072067240-3800136619-3437914000-1069.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 34 -> S-1-5-21-2072067240-3800136619-3437914000-1069
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 81 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (81) -> SID S-1-5-21-2072067240-3800136619-3437914000-1163.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 81 -> S-1-5-21-2072067240-3800136619-3437914000-1163
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 349 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (349) -> SID S-1-5-21-2072067240-3800136619-3437914000-1699.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 349 -> S-1-5-21-2072067240-3800136619-3437914000-1699
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 350 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (350) -> SID S-1-5-21-2072067240-3800136619-3437914000-1701.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 350 -> S-1-5-21-2072067240-3800136619-3437914000-1701
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 358 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (358) -> SID S-1-5-21-2072067240-3800136619-3437914000-1717.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 358 -> S-1-5-21-2072067240-3800136619-3437914000-1717
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 374 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (374) -> SID S-1-5-21-2072067240-3800136619-3437914000-1749.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 374 -> S-1-5-21-2072067240-3800136619-3437914000-1749
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 426 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (426) -> SID S-1-5-21-2072067240-3800136619-3437914000-1853.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 426 -> S-1-5-21-2072067240-3800136619-3437914000-1853
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 458 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (458) -> SID S-1-5-21-2072067240-3800136619-3437914000-1917.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 458 -> S-1-5-21-2072067240-3800136619-3437914000-1917
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 573 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (573) -> SID S-1-5-21-2072067240-3800136619-3437914000-2147.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 573 -> S-1-5-21-2072067240-3800136619-3437914000-2147
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 697 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (697) -> SID S-1-5-21-2072067240-3800136619-3437914000-2395.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 697 -> S-1-5-21-2072067240-3800136619-3437914000-2395
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 739 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (739) -> SID S-1-5-21-2072067240-3800136619-3437914000-2479.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 739 -> S-1-5-21-2072067240-3800136619-3437914000-2479
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 881 -> S-1-0-0
>[2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (881) -> SID S-1-5-21-2072067240-3800136619-3437914000-2763.
>[2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 881 -> S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-19228943-501768062-1246845465-1004
>  contains 22 SIDs
>  SID[  0]: S-1-5-21-19228943-501768062-1246845465-1004
>  SID[  1]: S-1-5-21-19228943-501768062-1246845465-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-19228943-501768062-1246845465-4896
>  SID[  6]: S-1-5-21-19228943-501768062-1246845465-4874
>  SID[  7]: S-1-5-21-19228943-501768062-1246845465-5117
>  SID[  8]: S-1-5-21-19228943-501768062-1246845465-4665
>  SID[  9]: S-1-5-21-19228943-501768062-1246845465-4806
>  SID[ 10]: S-1-5-21-19228943-501768062-1246845465-4807
>  SID[ 11]: S-1-5-21-19228943-501768062-1246845465-4681
>  SID[ 12]: S-1-5-21-19228943-501768062-1246845465-6506
>  SID[ 13]: S-1-5-21-19228943-501768062-1246845465-4712
>  SID[ 14]: S-1-5-21-19228943-501768062-1246845465-4689
>  SID[ 15]: S-1-5-21-19228943-501768062-1246845465-4997
>  SID[ 16]: S-1-5-21-19228943-501768062-1246845465-4830
>  SID[ 17]: S-1-5-21-19228943-501768062-1246845465-8240
>  SID[ 18]: S-1-5-21-19228943-501768062-1246845465-6216
>  SID[ 19]: S-1-5-21-19228943-501768062-1246845465-15672
>  SID[ 20]: S-1-5-21-19228943-501768062-1246845465-1071
>  SID[ 21]: S-1-5-21-19228943-501768062-1246845465-4815
>[2004/05/29 21:29:45, 10, pid=25784] libsmb/samlogon_cache.c:netsamlogon_cache_store(132)
>  netsamlogon_cache_store: SID [S-1-5-21-19228943-501768062-1246845465-1004]
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>  0000 timestamp: 40b96339
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>  000004 net_io_user_info3 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0004 ptr_user_info : 2bb37270
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 smb_io_time logon time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0008 low : b3577a98
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          000c high: 01c445d1
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000010 smb_io_time logoff time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0010 low : ffffffff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0014 high: 7fffffff
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_time kickoff time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0018 low : ffffffff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          001c high: 7fffffff
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000020 smb_io_time last set time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0020 low : 0bcb68a2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0024 high: 01c398ef
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000028 smb_io_time can change time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0028 low : 0bcb68a2
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          002c high: 01c398ef
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000030 smb_io_time must change time
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0030 low : ffffffff
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0034 high: 7fffffff
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000038 smb_io_unihdr hdr_user_name
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0038 uni_str_len: 000a
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          003a uni_max_len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          003c buffer     : 2bb373e4
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000040 smb_io_unihdr hdr_full_name
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0040 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0042 uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0044 buffer     : 00000000
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000048 smb_io_unihdr hdr_logon_script
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0048 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          004a uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          004c buffer     : 00000000
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000050 smb_io_unihdr hdr_profile_path
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0050 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0052 uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0054 buffer     : 00000000
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000058 smb_io_unihdr hdr_home_dir
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0058 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          005a uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          005c buffer     : 00000000
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000060 smb_io_unihdr hdr_dir_drive
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0060 uni_str_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0062 uni_max_len: 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0064 buffer     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      0068 logon_count   : 08b0
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>      006a bad_pw_count  : 0000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      006c user_rid      : 000003ec
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0070 group_rid     : 00000201
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0074 num_groups    : 00000012
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      0078 buffer_groups : 2bb3733c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      007c user_flgs     : 00000120
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      0080 user_sess_key: 44 77 57 ea c9 ae 09 6e 6b 0c ce b7 2d 11 63 89 
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000090 smb_io_unihdr hdr_logon_srv
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0090 uni_str_len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0092 uni_max_len: 000e
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0094 buffer     : 2bb373f0
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000098 smb_io_unihdr hdr_logon_dom
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          0098 uni_str_len: 000c
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606)
>          009a uni_max_len: 000e
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          009c buffer     : 2bb373fe
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      00a0 buffer_dom_id : 2bb373cc
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722)
>      00a4 padding       : 9e f0 3a 17 94 95 15 8b 78 39 71 08 e5 66 8a 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      00cc num_other_sids: 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      00d0 buffer_other_sids: 00000000
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0000d4 smb_io_unistr2 uni_user_name
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00d4 uni_max_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00d8 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00dc uni_str_len: 00000005
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>          00e0 buffer     : e.r.i.c.h.
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0000ea smb_io_unistr2 - NULL uni_full_name
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0000ea smb_io_unistr2 - NULL uni_logon_script
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0000ea smb_io_unistr2 - NULL uni_profile_path
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0000ea smb_io_unistr2 - NULL uni_home_dir
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0000ea smb_io_unistr2 - NULL uni_dir_drive
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>      00ec num_groups2   : 00000012
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0000f0 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00f0 g_rid: 00001320
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00f4 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0000f8 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00f8 g_rid: 0000130a
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          00fc attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000100 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0100 g_rid: 000013fd
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0104 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000108 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0108 g_rid: 00001239
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          010c attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000110 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0110 g_rid: 000012c6
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0114 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000118 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0118 g_rid: 000012c7
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          011c attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000120 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0120 g_rid: 00001249
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0124 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000128 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0128 g_rid: 0000196a
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          012c attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000130 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0130 g_rid: 00001268
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0134 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000138 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0138 g_rid: 00001251
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          013c attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000140 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0140 g_rid: 00001385
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0144 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000148 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0148 g_rid: 000012de
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          014c attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000150 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0150 g_rid: 00000201
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0154 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000158 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0158 g_rid: 00002030
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          015c attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000160 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0160 g_rid: 00001848
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0164 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000168 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0168 g_rid: 00003d38
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          016c attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000170 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0170 g_rid: 0000042f
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0174 attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000178 smb_io_gid 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0178 g_rid: 000012cf
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          017c attr : 00000007
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000180 smb_io_unistr2 uni_logon_srv
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0180 uni_max_len: 00000007
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0184 offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0188 uni_str_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>          018c buffer     : L.A.G.O.O.N.
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      000198 smb_io_unistr2 uni_logon_dom
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          0198 uni_max_len: 00000007
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          019c offset     : 00000000
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          01a0 uni_str_len: 00000006
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>          01a4 buffer     : N.E.B.U.L.A.
>[2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>      0001b0 smb_io_dom_sid2 
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635)
>          01b0 num_auths: 00000004
>[2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82)
>          0001b4 smb_io_dom_sid sid
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>              01b4 sid_rev_num: 01
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>              01b5 num_auths  : 04
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>              01b6 id_auth[0] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>              01b7 id_auth[1] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>              01b8 id_auth[2] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>              01b9 id_auth[3] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>              01ba id_auth[4] : 00
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577)
>              01bb id_auth[5] : 05
>[2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32s(862)
>              01bc sub_auths : 00000015 0125690f 1de85f7e 4a515a19 
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,45)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,45) wrote 45
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 35
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=11
>  smt_wct=0
>  smb_bcc=0
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,43)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,43) wrote 43
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 39
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=12
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   39 (0x27)
>  smb_bcc=0
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,45)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,45) wrote 45
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 35
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=2
>  smb_reh=0
>  smb_err=91
>  smb_flg=136
>  smb_flg2=34817
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=13
>  smt_wct=0
>  smb_bcc=0
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(18,39)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(18,39) wrote 39
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 35
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2049
>  smb_pid=25784
>  smb_uid=4097
>  smb_mid=14
>  smt_wct=0
>  smb_bcc=0
>[2004/05/29 21:29:45, 3, pid=25784] auth/auth.c:check_ntlm_password(268)
>  check_ntlm_password: winbind authentication for user [erich] succeeded
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:check_ntlm_password(292)
>  check_ntlm_password:  PAM Account for user [erich] succeeded
>[2004/05/29 21:29:45, 2, pid=25784] auth/auth.c:check_ntlm_password(305)
>  check_ntlm_password:  authentication for user [erich] -> [erich] -> [erich] succeeded
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:free_user_info(1298)
>  attempting to free (and zero) a user_info structure
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth_util.c:free_user_info(1301)
>  structure was created for erich
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117)
>  Got NT session key of length 16
>[2004/05/29 21:29:45, 10, pid=25784] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123)
>  Got LM session key of length 16
>[2004/05/29 21:29:45, 10, pid=25784] libsmb/ntlmssp.c:ntlmssp_server_auth(678)
>  ntlmssp_server_auth: Created NTLM2 session key.
>[2004/05/29 21:29:45, 3, pid=25784] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2004/05/29 21:29:45, 3, pid=25784] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
>  Got NTLMSSP neg_flags=0x60088215
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_SIGN
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_KEY_EXCH
>[2004/05/29 21:29:45, 10, pid=25784] smbd/password.c:register_vuid(158)
>  register_vuid: allocated vuid = 100
>[2004/05/29 21:29:45, 10, pid=25784] smbd/password.c:register_vuid(220)
>  register_vuid: (4065,15) erich erich NEBULA guest=0
>[2004/05/29 21:29:45, 3, pid=25784] smbd/password.c:register_vuid(222)
>  User name: erich	Real name: 
>[2004/05/29 21:29:45, 3, pid=25784] smbd/password.c:register_vuid(241)
>  UNIX uid 4065 is UNIX user erich, and will be vuid 100
>[2004/05/29 21:29:45, 7, pid=25784] param/loadparm.c:lp_servicenumber(4022)
>  lp_servicenumber: couldn't find erich
>[2004/05/29 21:29:45, 3, pid=25784] smbd/password.c:register_vuid(265)
>  Adding/updating homes service for user 'erich' using home directory: '/usr/users/erich'
>[2004/05/29 21:29:45, 7, pid=25784] param/loadparm.c:lp_servicenumber(4022)
>  lp_servicenumber: couldn't find homes
>[2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.WinXP.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/kleenex_q  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/kleenex_q  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,104)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,104) wrote 104
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 106
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x6a
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 3 of length 110
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=106
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=2560
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  106 (0x6A)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=63
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 5C 00 31 00 34  00 30 00 2E 00 31 00 34  .\.\.1.4 .0...1.4
>  [010] 00 32 00 2E 00 31 00 35  00 2E 00 31 00 36 00 38  .2...1.5 ...1.6.8
>  [020] 00 5C 00 4E 00 45 00 42  00 55 00 4C 00 41 00 48  .\.N.E.B .U.L.A.H
>  [030] 00 4F 00 4D 00 45 00 00  00 3F 3F 3F 3F 3F 00     .O.M.E.. .?????.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBtconX (pid 25784)
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:29:45, 4, pid=25784] smbd/reply.c:reply_tcon_and_X(381)
>  Client requested device type [?????] for share [NEBULAHOME]
>[2004/05/29 21:29:45, 5, pid=25784] smbd/service.c:make_connection(783)
>  making a connection to 'normal' service nebulahome
>[2004/05/29 21:29:45, 3, pid=25784] lib/access.c:check_access(313)
>  check_access: no hostnames in host allow/deny list.
>[2004/05/29 21:29:45, 2, pid=25784] lib/access.c:check_access(324)
>  Allowed connection from  (140.142.110.103)
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam(293)
>  Finding user erich
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is erich
>[2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [erich]!
>[2004/05/29 21:29:45, 3, pid=25784] smbd/service.c:make_connection_snum(457)
>  Connect path is '/usr/local/lib/samba/nebula-home' for service [nebulahome]
>[2004/05/29 21:29:45, 4, pid=25784] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for nebulahome
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 22 entries and first sid S-1-5-21-19228943-501768062-1246845465-1004.
>[2004/05/29 21:29:45, 3, pid=25784] lib/util_seaccess.c:se_access_check(251)
>[2004/05/29 21:29:45, 3, pid=25784] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-19228943-501768062-1246845465-1004
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-513
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4896
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4874
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-5117
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4665
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4806
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4807
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4681
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-6506
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4712
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4689
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4997
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4830
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-8240
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-6216
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-15672
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-1071
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4815
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (2) granted.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/vfs.c:vfs_init_default(203)
>  Initialising default vfs hooks
>[2004/05/29 21:29:45, 3, pid=25784] smbd/vfs.c:vfs_init_custom(229)
>  Initialising custom vfs hooks from [extd_audit]
>[2004/05/29 21:29:45, 5, pid=25784] lib/module.c:smb_probe_module(101)
>  Probing module 'extd_audit'
>[2004/05/29 21:29:45, 5, pid=25784] lib/module.c:smb_probe_module(112)
>  Probing module 'extd_audit': Trying to load from /usr/local/lib/vfs/extd_audit.so
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:smb_register_vfs(193)
>  Successfully added vfs backend 'extd_audit'
>[2004/05/29 21:29:45, 10, pid=25784] modules/vfs_extd_audit.c:init_module(339)
>  vfs_extd_audit: Debug class number of 'extd_audit': 16
>[2004/05/29 21:29:45, 2, pid=25784] lib/module.c:do_smb_load_module(63)
>  Module '/usr/local/lib/vfs/extd_audit.so' loaded
>  Successfully loaded vfs module [extd_audit] with the new modules system
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #0 (type 0, layer 2)
>  Accepting operation type 0 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #1 (type 1, layer 2)
>  Accepting operation type 1 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #2 (type 6, layer 2)
>  Accepting operation type 6 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #3 (type 8, layer 2)
>  Accepting operation type 8 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #4 (type 9, layer 2)
>  Accepting operation type 9 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #5 (type 11, layer 2)
>  Accepting operation type 11 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #6 (type 12, layer 2)
>  Accepting operation type 12 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #7 (type 19, layer 2)
>  Accepting operation type 19 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #8 (type 24, layer 2)
>  Accepting operation type 24 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #9 (type 25, layer 2)
>  Accepting operation type 25 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #10 (type 26, layer 2)
>  Accepting operation type 26 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #11 (type 43, layer 2)
>  Accepting operation type 43 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #12 (type 44, layer 2)
>  Accepting operation type 44 from module extd_audit
>[2004/05/29 21:29:45, 5, pid=25784] smbd/connection.c:claim_connection(170)
>  claiming nebulahome 0
>[2004/05/29 21:29:45, 10, pid=25784] smbd/uid.c:is_share_read_only_for_user(99)
>  is_share_read_only_for_user: share nebulahome is read-only for unix user erich
>[2004/05/29 21:29:45, 4, pid=25784] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for nebulahome
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 22 entries and first sid S-1-5-21-19228943-501768062-1246845465-1004.
>[2004/05/29 21:29:45, 3, pid=25784] lib/util_seaccess.c:se_access_check(251)
>[2004/05/29 21:29:45, 3, pid=25784] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-19228943-501768062-1246845465-1004
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-513
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4896
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4874
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-5117
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4665
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4806
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4807
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4681
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-6506
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4712
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4689
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4997
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4830
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-8240
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-6216
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-15672
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-1071
>  se_access_check: also S-1-5-21-19228943-501768062-1246845465-4815
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2004/05/29 21:29:45, 5, pid=25784] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (1) granted.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-19228943-501768062-1246845465-1004
>  contains 22 SIDs
>  SID[  0]: S-1-5-21-19228943-501768062-1246845465-1004
>  SID[  1]: S-1-5-21-19228943-501768062-1246845465-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-19228943-501768062-1246845465-4896
>  SID[  6]: S-1-5-21-19228943-501768062-1246845465-4874
>  SID[  7]: S-1-5-21-19228943-501768062-1246845465-5117
>  SID[  8]: S-1-5-21-19228943-501768062-1246845465-4665
>  SID[  9]: S-1-5-21-19228943-501768062-1246845465-4806
>  SID[ 10]: S-1-5-21-19228943-501768062-1246845465-4807
>  SID[ 11]: S-1-5-21-19228943-501768062-1246845465-4681
>  SID[ 12]: S-1-5-21-19228943-501768062-1246845465-6506
>  SID[ 13]: S-1-5-21-19228943-501768062-1246845465-4712
>  SID[ 14]: S-1-5-21-19228943-501768062-1246845465-4689
>  SID[ 15]: S-1-5-21-19228943-501768062-1246845465-4997
>  SID[ 16]: S-1-5-21-19228943-501768062-1246845465-4830
>  SID[ 17]: S-1-5-21-19228943-501768062-1246845465-8240
>  SID[ 18]: S-1-5-21-19228943-501768062-1246845465-6216
>  SID[ 19]: S-1-5-21-19228943-501768062-1246845465-15672
>  SID[ 20]: S-1-5-21-19228943-501768062-1246845465-1071
>  SID[ 21]: S-1-5-21-19228943-501768062-1246845465-4815
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_user(267)
>  change_to_user uid=(4065,4065) gid=(0,15)
>[2004/05/29 21:29:45, 1, pid=25784] smbd/service.c:make_connection_snum(619)
>  kleenex_q (140.142.110.103) connect to service nebulahome initially as user erich (uid=4065, gid=15) (pid 25784)
>[2004/05/29 21:29:45, 10, pid=25784] modules/vfs_extd_audit.c:audit_connect(112)
>  Connected to service nebulahome as user erich
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:29:45, 2, pid=25784] smbd/reply.c:reply_tcon_and_X(424)
>  Serving nebulahome as a Dfs root
>[2004/05/29 21:29:45, 3, pid=25784] smbd/reply.c:reply_tcon_and_X(429)
>  tconX service=NEBULAHOME 
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=54
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=2560
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    3 (0x3)
>  smb_bcc=13
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 41 3A 00 4E 00 54 00 46  00 53 00 00 00           A:.N.T.F .S...
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,58)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,58) wrote 58
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 128
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x80
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 4 of length 132
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=128
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=2624
>  smt_wct=15
>  smb_vwv[ 0]=   60 (0x3C)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   60 (0x3C)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=63
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 31 00 34 00 30  ...ì.... .\.1.4.0
>  [010] 00 2E 00 31 00 34 00 32  00 2E 00 31 00 35 00 2E  ...1.4.2 ...1.5..
>  [020] 00 31 00 36 00 38 00 5C  00 6E 00 65 00 62 00 75  .1.6.8.\ .n.e.b.u
>  [030] 00 6C 00 61 00 68 00 6F  00 6D 00 65 00 00 00     .l.a.h.o .m.e...
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25784)
>[2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-19228943-501768062-1246845465-1004
>  contains 22 SIDs
>  SID[  0]: S-1-5-21-19228943-501768062-1246845465-1004
>  SID[  1]: S-1-5-21-19228943-501768062-1246845465-513
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-19228943-501768062-1246845465-4896
>  SID[  6]: S-1-5-21-19228943-501768062-1246845465-4874
>  SID[  7]: S-1-5-21-19228943-501768062-1246845465-5117
>  SID[  8]: S-1-5-21-19228943-501768062-1246845465-4665
>  SID[  9]: S-1-5-21-19228943-501768062-1246845465-4806
>  SID[ 10]: S-1-5-21-19228943-501768062-1246845465-4807
>  SID[ 11]: S-1-5-21-19228943-501768062-1246845465-4681
>  SID[ 12]: S-1-5-21-19228943-501768062-1246845465-6506
>  SID[ 13]: S-1-5-21-19228943-501768062-1246845465-4712
>  SID[ 14]: S-1-5-21-19228943-501768062-1246845465-4689
>  SID[ 15]: S-1-5-21-19228943-501768062-1246845465-4997
>  SID[ 16]: S-1-5-21-19228943-501768062-1246845465-4830
>  SID[ 17]: S-1-5-21-19228943-501768062-1246845465-8240
>  SID[ 18]: S-1-5-21-19228943-501768062-1246845465-6216
>  SID[ 19]: S-1-5-21-19228943-501768062-1246845465-15672
>  SID[ 20]: S-1-5-21-19228943-501768062-1246845465-1071
>  SID[ 21]: S-1-5-21-19228943-501768062-1246845465-4815
>[2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_user(267)
>  change_to_user uid=(4065,4065) gid=(0,15)
>[2004/05/29 21:29:45, 4, pid=25784] smbd/vfs.c:vfs_ChDir(654)
>  vfs_ChDir to /usr/local/lib/samba/nebula-home
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2331)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90)
>  temp in parse_processed_dfs_path: .140.142.15.168/nebulahome. after trimming \'s
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99)
>  parse_processed_dfs_path: hostname: 140.142.15.168
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395)
>  dfs_redirect: Not redirecting 140.142.15.168/nebulahome.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400)
>  dfs_redirect: Path converted to non-dfs path 
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114)
>  unix_convert called on file ""
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2362)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270)
>  dos_mode: .
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2478)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2488)
>  SMB_QFBI - create: Sat May 29 21:19:49 2004
>   access: Sat May 29 21:28:07 2004
>   write: Sat May 29 21:19:49 2004
>   change: Sat May 29 21:19:49 2004
>   mode: 10
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,104)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,104) wrote 104
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 70
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x46
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 5 of length 74
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=2688
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 01 00 00 05 01                                    ..... 
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25784)
>[2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfsinfo(1804)
>  call_trans2qfsinfo: level = 261
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,80)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,80) wrote 80
>[2004/05/29 21:29:45, 4, pid=25784] smbd/trans2.c:call_trans2qfsinfo(2087)
>  SMBtrans2 info_level = 261
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 128
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x80
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 6 of length 132
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=128
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=2752
>  smt_wct=15
>  smb_vwv[ 0]=   60 (0x3C)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   60 (0x3C)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=63
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 31 00 34 00 30  ...ì.... .\.1.4.0
>  [010] 00 2E 00 31 00 34 00 32  00 2E 00 31 00 35 00 2E  ...1.4.2 ...1.5..
>  [020] 00 31 00 36 00 38 00 5C  00 6E 00 65 00 62 00 75  .1.6.8.\ .n.e.b.u
>  [030] 00 6C 00 61 00 68 00 6F  00 6D 00 65 00 00 00     .l.a.h.o .m.e...
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25784)
>[2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2331)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90)
>  temp in parse_processed_dfs_path: .140.142.15.168/nebulahome. after trimming \'s
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99)
>  parse_processed_dfs_path: hostname: 140.142.15.168
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395)
>  dfs_redirect: Not redirecting 140.142.15.168/nebulahome.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400)
>  dfs_redirect: Path converted to non-dfs path 
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114)
>  unix_convert called on file ""
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2362)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270)
>  dos_mode: .
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2478)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2488)
>  SMB_QFBI - create: Sat May 29 21:19:49 2004
>   access: Sat May 29 21:28:07 2004
>   write: Sat May 29 21:19:49 2004
>   change: Sat May 29 21:19:49 2004
>   mode: 10
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,104)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,104) wrote 104
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 128
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x80
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 7 of length 132
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=128
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=2816
>  smt_wct=15
>  smb_vwv[ 0]=   60 (0x3C)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   60 (0x3C)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=63
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 31 00 34 00 30  ...ì.... .\.1.4.0
>  [010] 00 2E 00 31 00 34 00 32  00 2E 00 31 00 35 00 2E  ...1.4.2 ...1.5..
>  [020] 00 31 00 36 00 38 00 5C  00 6E 00 65 00 62 00 75  .1.6.8.\ .n.e.b.u
>  [030] 00 6C 00 61 00 68 00 6F  00 6D 00 65 00 00 00     .l.a.h.o .m.e...
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25784)
>[2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2331)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90)
>  temp in parse_processed_dfs_path: .140.142.15.168/nebulahome. after trimming \'s
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99)
>  parse_processed_dfs_path: hostname: 140.142.15.168
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395)
>  dfs_redirect: Not redirecting 140.142.15.168/nebulahome.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400)
>  dfs_redirect: Path converted to non-dfs path 
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114)
>  unix_convert called on file ""
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2362)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270)
>  dos_mode: .
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2478)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2488)
>  SMB_QFBI - create: Sat May 29 21:19:49 2004
>   access: Sat May 29 21:28:07 2004
>   write: Sat May 29 21:19:49 2004
>   change: Sat May 29 21:19:49 2004
>   mode: 10
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,104)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,104) wrote 104
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 128
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x80
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 8 of length 132
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=128
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=2880
>  smt_wct=15
>  smb_vwv[ 0]=   60 (0x3C)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   60 (0x3C)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=63
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 00 00 00 EC 03 00 00 00  00 5C 00 31 00 34 00 30  ...ì.... .\.1.4.0
>  [010] 00 2E 00 31 00 34 00 32  00 2E 00 31 00 35 00 2E  ...1.4.2 ...1.5..
>  [020] 00 31 00 36 00 38 00 5C  00 6E 00 65 00 62 00 75  .1.6.8.\ .n.e.b.u
>  [030] 00 6C 00 61 00 68 00 6F  00 6D 00 65 00 00 00     .l.a.h.o .m.e...
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25784)
>[2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2331)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90)
>  temp in parse_processed_dfs_path: .140.142.15.168/nebulahome. after trimming \'s
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99)
>  parse_processed_dfs_path: hostname: 140.142.15.168
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395)
>  dfs_redirect: Not redirecting 140.142.15.168/nebulahome.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400)
>  dfs_redirect: Path converted to non-dfs path 
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114)
>  unix_convert called on file ""
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2362)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270)
>  dos_mode: .
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2478)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2488)
>  SMB_QFBI - create: Sat May 29 21:19:49 2004
>   access: Sat May 29 21:28:07 2004
>   write: Sat May 29 21:19:49 2004
>   change: Sat May 29 21:19:49 2004
>   mode: 10
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,104)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,104) wrote 104
>[2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 152
>[2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x98
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890)
>  Transaction 9 of length 156
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456)
>[2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466)
>  size=152
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=55303
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=2944
>  smt_wct=15
>  smb_vwv[ 0]=   84 (0x54)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   84 (0x54)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=87
>[2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864)
>  [000] 63 00 2E 16 00 56 05 06  00 04 01 00 00 00 00 5C  c....V.. .......\
>  [010] 00 31 00 34 00 30 00 2E  00 31 00 34 00 32 00 2E  .1.4.0.. .1.4.2..
>  [020] 00 31 00 35 00 2E 00 31  00 36 00 38 00 5C 00 6E  .1.5...1 .6.8.\.n
>  [030] 00 65 00 62 00 75 00 6C  00 61 00 68 00 6F 00 6D  .e.b.u.l .a.h.o.m
>  [040] 00 65 00 5C 00 4D 00 59  00 48 00 4F 00 4D 00 45  .e.\.M.Y .H.O.M.E
>  [050] 00 22 00 2A 00 00 00                              .".*... 
>[2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25784)
>[2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2findfirst(1355)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90)
>  temp in parse_processed_dfs_path: .140.142.15.168/nebulahome/MYHOME"*. after trimming \'s
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99)
>  parse_processed_dfs_path: hostname: 140.142.15.168
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(111)
>  parse_processed_dfs_path: servicename: nebulahome
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(116)
>  parse_processed_dfs_path: rest of the path: MYHOME"*
>[2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:resolve_dfs_path(307)
>  resolve_dfs_path: Conn path = /usr/local/lib/samba/nebula-home req_path = MYHOME"*
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "MYHOME"*"
>[2004/05/29 21:29:45, 10, pid=25784] smbd/statcache.c:stat_cache_lookup(251)
>  stat_cache_lookup: lookup failed for name [MYHOME"*]
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(177)
>  unix_convert begin: name = MYHOME"*, dirpath = , start = MYHOME"*
>[2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled MYHOME"* ?
>[2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component MYHOME"* (len 8) ?
>[2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled MYHOME"* ?
>[2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component MYHOME"* (len 8) ?
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(312)
>  New file MYHOME"*
>[2004/05/29 21:29:45, 5, pid=25784] smbd/msdfs.c:is_msdfs_link(244)
>  is_msdfs_link: MYHOME"* does not exist.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395)
>  dfs_redirect: Not redirecting 140.142.15.168/nebulahome/MYHOME"*.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400)
>  dfs_redirect: Path converted to non-dfs path MYHOME"*
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "MYHOME"*"
>[2004/05/29 21:29:45, 10, pid=25784] smbd/statcache.c:stat_cache_lookup(251)
>  stat_cache_lookup: lookup failed for name [MYHOME"*]
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(177)
>  unix_convert begin: name = MYHOME"*, dirpath = , start = MYHOME"*
>[2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled MYHOME"* ?
>[2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component MYHOME"* (len 8) ?
>[2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled MYHOME"* ?
>[2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component MYHOME"* (len 8) ?
>[2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(312)
>  New file MYHOME"*
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: MYHOME"*
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2findfirst(1400)
>  dir=./, mask = MYHOME"*
>[2004/05/29 21:29:45, 5, pid=25784] smbd/dir.c:start_dir(334)
>  start_dir dir=./
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: ./
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 10, pid=25784] modules/vfs_extd_audit.c:audit_opendir(141)
>  vfs_extd_audit: opendir ./  
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: myhome
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 3, pid=25784] smbd/dir.c:dptr_create(491)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2004/05/29 21:29:45, 4, pid=25784] smbd/trans2.c:call_trans2findfirst(1430)
>  dptr_num is 256, wcard = MYHOME"*, attr = 22
>[2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:call_trans2findfirst(1435)
>  dirpath=<./> dontdescend=<>
>[2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8368a10 now at offset 1
>[2004/05/29 21:29:45, 10, pid=25784] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(MYHOME"*,.) -> -1
>[2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8368a10 now at offset 2
>[2004/05/29 21:29:45, 10, pid=25784] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(MYHOME"*,.) -> -1
>[2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8368a10 now at offset 3
>[2004/05/29 21:29:45, 10, pid=25784] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(MYHOME"*,myhome) -> 0
>[2004/05/29 21:29:45, 5, pid=25784] smbd/msdfs.c:is_msdfs_link(258)
>  is_msdfs_link: ./myhome -> msdfs:kodak5.cac.washington.edu\homes
>[2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(931)
>  get_lanman2_dir_entry: Masquerading msdfs link ./myhome as a directory
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270)
>  dos_mode: ./myhome
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508)
>  is_in_path: ./myhome
>[2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(964)
>  get_lanman2_dir_entry found ./myhome fname=myhome
>[2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(1048)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8368a10 now at offset 3
>[2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2findfirst(1481)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2004/05/29 21:29:45, 4, pid=25784] smbd/dir.c:dptr_close_internal(224)
>  closing dptr key 256
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010
>[2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432)
>  write_socket(22,180)
>[2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435)
>  write_socket(22,180) wrote 180
>[2004/05/29 21:29:45, 4, pid=25784] smbd/trans2.c:call_trans2findfirst(1511)
>  SMBtrans2 mask=MYHOME"* directory=./ dirtype=22 numentries=1
>[2004/05/29 21:29:55, 10, pid=25784] smbd/process.c:async_processing(122)
>  async_processing: Doing async processing.
>[2004/05/29 21:29:55, 5, pid=25784] smbd/oplock.c:receive_local_message(107)
>  receive_local_message: doing select with timeout of 1 ms
>[2004/05/29 21:29:55, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:55, 5, pid=25784] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:29:55, 2, pid=25784] smbd/server.c:exit_server(568)
>  Closing connections
>[2004/05/29 21:29:55, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:55, 5, pid=25784] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:29:55, 1, pid=25784] smbd/service.c:close_cnum(801)
>  kleenex_q (140.142.110.103) closed connection to service nebulahome
>[2004/05/29 21:29:55, 10, pid=25784] modules/vfs_extd_audit.c:audit_disconnect(122)
>  Disconnected from VFS module extd_audit
>[2004/05/29 21:29:55, 3, pid=25784] smbd/connection.c:yield_connection(69)
>  Yielding connection to nebulahome
>[2004/05/29 21:29:55, 4, pid=25784] smbd/vfs.c:vfs_ChDir(654)
>  vfs_ChDir to /
>[2004/05/29 21:29:55, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:29:55, 5, pid=25784] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:free_server_info(1324)
>  attempting to free (and zero) a server_info structure
>[2004/05/29 21:29:55, 3, pid=25784] smbd/connection.c:yield_connection(69)
>  Yielding connection to 
>[2004/05/29 21:29:55, 3, pid=25784] smbd/connection.c:yield_connection(76)
>  yield_connection: tdb_delete for name  failed with error Record does not exist.
>[2004/05/29 21:29:55, 5, pid=25784] smbd/oplock.c:receive_local_message(107)
>  receive_local_message: doing select with timeout of 1 ms
>[2004/05/29 21:29:55, 3, pid=25784] smbd/server.c:exit_server(611)
>  Server exit (Caught TERM signal)

Actions: View

Attachments on bug 1406: 529 | 530