smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2010/04/07 12:13:31.223681, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 00 00 B6 11 F5 03 00 00 00 00 01 ........ .... [2010/04/07 12:13:31.223747, 3] smbd/process.c:1294(switch_message) switch message SMBtrans2 (pid 6953) conn 0x80955c30 [2010/04/07 12:13:31.224012, 4] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/04/07 12:13:31.224086, 3] smbd/trans2.c:7705(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) fatture acquisto/Cd XP/SETUP.EXE (fnum 4534) info_level=1013 totdata=1 [2010/04/07 12:13:31.224144, 3] smbd/trans2.c:7303(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: fatture acquisto/Cd XP/SETUP.EXE (fnum 4534) info_level=1013 totdata=1 [2010/04/07 12:13:31.224201, 8] smbd/dosmode.c:613(dos_mode) dos_mode: fatture acquisto/Cd XP/SETUP.EXE [2010/04/07 12:13:31.224266, 8] smbd/dosmode.c:207(dos_mode_from_sbuf) dos_mode_from_sbuf returning a [2010/04/07 12:13:31.224323, 8] smbd/dosmode.c:666(dos_mode) dos_mode returning a [2010/04/07 12:13:31.224380, 10] smbd/trans2.c:5732(smb_set_file_disposition_info) smb_set_file_disposition_info: file fatture acquisto/Cd XP/SETUP.EXE, dosmode = 32, delete_on_close = 1 [2010/04/07 12:13:31.224438, 10] locking/locking.c:1436(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum = 4534, file fatture acquisto/Cd XP/SETUP.EXE [2010/04/07 12:13:31.224500, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 10080000000000000AA02C00000000000000000000000000 [2010/04/07 12:13:31.224558, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x80f5e008 [2010/04/07 12:13:31.224622, 10] locking/locking.c:552(parse_share_modes) parse_share_modes: delete_on_close: 0, owrt: Thu Mar 25 15:36:21 2010 CET, cwrt: Thu Jan 1 01:00:00 1970 CET, tok: 0, num_share_modes: 1 [2010/04/07 12:13:31.224695, 10] locking/locking.c:655(parse_share_modes) parse_share_modes: share_mode_entry[0]: pid = 6953, share_access = 0x7, private_options = 0x200040, access_mask = 0x10080, mid = 0x0, type= 0x10, gen_id = 55, uid = 10031, flags = 0, file_id 810:2ca00a:0 [2010/04/07 12:13:31.224753, 10] locking/locking.c:726(unparse_share_modes) unparse_share_modes: del: 1, owrt: Thu Mar 25 15:36:21 2010 CET cwrt: Thu Jan 1 01:00:00 1970 CET, tok: 40, num: 1 [2010/04/07 12:13:31.224825, 10] locking/locking.c:518(print_share_mode_table) print_share_mode_table: share_mode_entry[0]: pid = 6953, share_access = 0x7, private_options = 0x200040, access_mask = 0x10080, mid = 0x0, type= 0x10, gen_id = 55, uid = 10031, flags = 0, file_id 810:2ca00a:0 [2010/04/07 12:13:31.224883, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 10080000000000000AA02C00000000000000000000000000 [2010/04/07 12:13:31.224955, 9] smbd/trans2.c:910(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2010/04/07 12:13:31.225010, 9] smbd/trans2.c:912(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2010/04/07 12:13:31.225066, 5] lib/util.c:617(show_msg) [2010/04/07 12:13:31.225096, 5] lib/util.c:627(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=4 smb_pid=38896 smb_uid=101 smb_mid=35333 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2010/04/07 12:13:31.225700, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 00 00 ... [2010/04/07 12:13:31.225961, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 41 [2010/04/07 12:13:31.226039, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x29 [2010/04/07 12:13:31.226132, 3] smbd/process.c:1485(process_smb) Transaction 2471 of length 45 (0 toread) [2010/04/07 12:13:31.226187, 5] lib/util.c:617(show_msg) [2010/04/07 12:13:31.226217, 5] lib/util.c:627(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=4 smb_pid=65279 smb_uid=101 smb_mid=35397 smt_wct=3 smb_vwv[ 0]= 4534 (0x11B6) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2010/04/07 12:13:31.226664, 3] smbd/process.c:1294(switch_message) switch message SMBclose (pid 6953) conn 0x80955c30 [2010/04/07 12:13:31.226968, 4] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/04/07 12:13:31.227024, 3] smbd/reply.c:4634(reply_close) close fd=-1 fnum=4534 (numopen=2) [2010/04/07 12:13:31.227080, 6] smbd/close.c:501(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2010/04/07 12:13:31.227147, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 10080000000000000AA02C00000000000000000000000000 [2010/04/07 12:13:31.227215, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x80f5db08 [2010/04/07 12:13:31.227271, 10] locking/locking.c:552(parse_share_modes) parse_share_modes: delete_on_close: 1, owrt: Thu Mar 25 15:36:21 2010 CET, cwrt: Thu Jan 1 01:00:00 1970 CET, tok: 40, num_share_modes: 1 [2010/04/07 12:13:31.227344, 10] locking/locking.c:655(parse_share_modes) parse_share_modes: share_mode_entry[0]: pid = 6953, share_access = 0x7, private_options = 0x200040, access_mask = 0x10080, mid = 0x0, type= 0x10, gen_id = 55, uid = 10031, flags = 0, file_id 810:2ca00a:0 [2010/04/07 12:13:31.227402, 5] smbd/close.c:385(close_remove_share_mode) close_remove_share_mode: file fatture acquisto/Cd XP/SETUP.EXE. Delete on close was set - deleting file. [2010/04/07 12:13:31.227476, 10] modules/vfs_recycle.c:68(recycle_repository) recycle: repository = /data/recycle/%S/%U [2010/04/07 12:13:31.227600, 10] modules/vfs_recycle.c:157(recycle_maxsize) recycle: maxsize = 102400000 [2010/04/07 12:13:31.227649, 10] modules/vfs_recycle.c:169(recycle_minsize) recycle: minsize = 10240 [2010/04/07 12:13:31.227699, 10] modules/vfs_recycle.c:550(recycle_unlink) recycle: fname = fatture acquisto/Cd XP/SETUP.EXE [2010/04/07 12:13:31.227760, 10] modules/vfs_recycle.c:552(recycle_unlink) recycle: fpath = fatture acquisto/Cd XP [2010/04/07 12:13:31.227815, 10] modules/vfs_recycle.c:554(recycle_unlink) recycle: base = SETUP.EXE [2010/04/07 12:13:31.227877, 10] modules/vfs_recycle.c:123(recycle_exclude) recycle: exclude = *.tmp|*.obj|~$*|*.~??|*.log|*.trace|*.temp|*.dat ... [2010/04/07 12:13:31.227932, 10] modules/vfs_recycle.c:134(recycle_exclude_dir) recycle: exclude_dir = ... [2010/04/07 12:13:31.227998, 10] modules/vfs_recycle.c:79(recycle_keep_dir_tree) recycle_bin: keeptree = True [2010/04/07 12:13:31.228076, 10] modules/vfs_recycle.c:581(recycle_unlink) recycle: Creating directory /data/recycle/Amministrazione e Finanza/admin/fatture acquisto/Cd XP [2010/04/07 12:13:31.228133, 10] modules/vfs_recycle.c:187(recycle_directory_mode) recycle: directory_mode = 700 [2010/04/07 12:13:31.228191, 10] modules/vfs_recycle.c:312(recycle_create_dir) recycle: dir /data already exists [2010/04/07 12:13:31.228252, 10] modules/vfs_recycle.c:187(recycle_directory_mode) recycle: directory_mode = 700 [2010/04/07 12:13:31.228305, 10] modules/vfs_recycle.c:204(recycle_subdir_mode) recycle: subdir_mode = 700 [2010/04/07 12:13:31.228360, 10] modules/vfs_recycle.c:312(recycle_create_dir) recycle: dir /data/recycle already exists [2010/04/07 12:13:31.228413, 10] modules/vfs_recycle.c:187(recycle_directory_mode) recycle: directory_mode = 700 [2010/04/07 12:13:31.228475, 10] modules/vfs_recycle.c:204(recycle_subdir_mode) recycle: subdir_mode = 700 [2010/04/07 12:13:31.228591, 10] modules/vfs_recycle.c:312(recycle_create_dir) recycle: dir /data/recycle/Amministrazione e Finanza already exists [2010/04/07 12:13:31.228646, 10] modules/vfs_recycle.c:187(recycle_directory_mode) recycle: directory_mode = 700 [2010/04/07 12:13:31.228697, 10] modules/vfs_recycle.c:204(recycle_subdir_mode) recycle: subdir_mode = 700 [2010/04/07 12:13:31.228755, 10] modules/vfs_recycle.c:312(recycle_create_dir) recycle: dir /data/recycle/Amministrazione e Finanza/admin already exists [2010/04/07 12:13:31.228812, 10] modules/vfs_recycle.c:187(recycle_directory_mode) recycle: directory_mode = 700 [2010/04/07 12:13:31.228897, 10] modules/vfs_recycle.c:204(recycle_subdir_mode) recycle: subdir_mode = 700 [2010/04/07 12:13:31.228960, 10] modules/vfs_recycle.c:312(recycle_create_dir) recycle: dir /data/recycle/Amministrazione e Finanza/admin/fatture acquisto already exists [2010/04/07 12:13:31.229011, 10] modules/vfs_recycle.c:187(recycle_directory_mode) recycle: directory_mode = 700 [2010/04/07 12:13:31.229029, 10] modules/vfs_recycle.c:204(recycle_subdir_mode) recycle: subdir_mode = 700 [2010/04/07 12:13:31.229054, 5] modules/vfs_recycle.c:314(recycle_create_dir) recycle: creating new dir /data/recycle/Amministrazione e Finanza/admin/fatture acquisto/Cd XP [2010/04/07 12:13:31.229125, 10] modules/vfs_recycle.c:187(recycle_directory_mode) recycle: directory_mode = 700 [2010/04/07 12:13:31.229141, 10] modules/vfs_recycle.c:204(recycle_subdir_mode) recycle: subdir_mode = 700 [2010/04/07 12:13:31.229162, 10] modules/vfs_recycle.c:606(recycle_unlink) recycle: recycled file name: /data/recycle/Amministrazione e Finanza/admin/fatture acquisto/Cd XP/SETUP.EXE [2010/04/07 12:13:31.229190, 10] modules/vfs_recycle.c:637(recycle_unlink) recycle: Moving fatture acquisto/Cd XP/SETUP.EXE to /data/recycle/Amministrazione e Finanza/admin/fatture acquisto/Cd XP/SETUP.EXE [2010/04/07 12:13:31.229230, 10] modules/vfs_recycle.c:101(recycle_touch) recycle: touch = False [2010/04/07 12:13:31.229248, 10] modules/vfs_recycle.c:112(recycle_touch_mtime) recycle: touch_mtime = True [2010/04/07 12:13:31.229265, 10] modules/vfs_recycle.c:112(recycle_touch_mtime) recycle: touch_mtime = True [2010/04/07 12:13:31.229290, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(10031, 10015) : sec_ctx_stack_ndx = 1 [2010/04/07 12:13:31.229309, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2010/04/07 12:13:31.229326, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/04/07 12:13:31.229342, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/04/07 12:13:31.229358, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/04/07 12:13:31.229403, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (10031, 10015) - sec_ctx_stack_ndx = 0 [2010/04/07 12:13:31.229450, 0] modules/vfs_recycle.c:440(recycle_do_touch) recycle: touching /data/recycle/Amministrazione e Finanza/admin/fatture acquisto/Cd XP/SETUP.EXE failed, reason = Function not implemented [2010/04/07 12:13:31.229651, 10] smbd/notify_internal.c:890(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/data/amministrazione_finanza/fatture acquisto/Cd XP/SETUP.EXE [2010/04/07 12:13:31.229673, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 10080000000000000AA02C00000000000000000000000000 [2010/04/07 12:13:31.229698, 2] smbd/close.c:656(close_normal_file) PEDON.IT\admin closed file fatture acquisto/Cd XP/SETUP.EXE (numopen=1) NT_STATUS_OK [2010/04/07 12:13:31.229716, 5] smbd/files.c:497(file_free) freed files structure 4534 (1 used) [2010/04/07 12:13:31.229733, 5] lib/util.c:617(show_msg) [2010/04/07 12:13:31.229743, 5] lib/util.c:627(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=4 smb_pid=65279 smb_uid=101 smb_mid=35397 smt_wct=0 smb_bcc=0 [2010/04/07 12:13:31.229831, 10] smbd/notify_inotify.c:162(inotify_dispatch) inotify_dispatch called with mask=40, name=[SETUP.EXE] [2010/04/07 12:13:31.229850, 10] smbd/notify_inotify.c:194(inotify_dispatch) inotify_dispatch: ne.action = 2, ne.path = SETUP.EXE [2010/04/07 12:13:31.229866, 10] smbd/notify_inotify.c:112(filter_match) filter_match: e->mask=40, w->mask=210003c6, w->filter=17 [2010/04/07 12:13:31.229882, 10] smbd/notify_internal.c:299(sys_notify_callback) sys_notify_callback called with action=2, for SETUP.EXE [2010/04/07 12:13:31.229897, 10] smbd/notify.c:185(notify_callback) notify_callback called for fatture acquisto/Cd XP 0000 offset: 00000000 0004 action: 00000002 0008 namelen: 00000012 000c name: S.E.T.U.P...E.X.E... [2010/04/07 12:13:31.229962, 9] smbd/nttrans.c:233(send_nt_replies) nt_rep: params_sent_thistime = 30, data_sent_thistime = 0, useable_space = 130994 [2010/04/07 12:13:31.229979, 9] smbd/nttrans.c:235(send_nt_replies) nt_rep: params_to_send = 30, data_to_send = 0, paramsize = 30, datasize = 0 [2010/04/07 12:13:31.229994, 5] lib/util.c:617(show_msg) [2010/04/07 12:13:31.230004, 5] lib/util.c:627(show_msg) size=104 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203