[2004/07/12 22:36:48, 5] smbd/uid.c:change_to_root_user(295) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 200 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=12800 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 FC 9E 00 00 00 00 35 00 00 00 00 00 00 00 00 .......5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0 [2004/07/12 22:36:48, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-3447701488-1579429421-2438307492-2000 contains 6 SIDs SID[ 0]: S-1-5-21-3447701488-1579429421-2438307492-2000 SID[ 1]: S-1-5-21-3447701488-1579429421-2438307492-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-3447701488-1579429421-2438307492-1201 [2004/07/12 22:36:48, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 500 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 100 Group[ 1]: 500 [2004/07/12 22:36:48, 5] smbd/uid.c:change_to_user(280) change_to_user uid=(500,500) gid=(0,500) [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00009efc [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=12800 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 201 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=12864 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 5C 8E 00 00 00 00 35 00 00 00 00 00 00 00 00 .\.....5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00008e5c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=12864 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 202 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=12928 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 BC 7D 00 00 00 00 35 00 00 00 00 00 00 00 00 ..}....5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00007dbc [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=12928 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 203 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=12992 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 1C 6D 00 00 00 00 35 00 00 00 00 00 00 00 00 ..m....5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00006d1c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=12992 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 204 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13056 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 7C 5C 00 00 00 00 35 00 00 00 00 00 00 00 00 .|\....5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00005c7c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13056 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 205 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13120 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 DC 4B 00 00 00 00 35 00 00 00 00 00 00 00 00 ..K....5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00004bdc [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13120 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 206 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13184 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 3C 3B 00 00 00 00 35 00 00 00 00 00 00 00 00 .<;....5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00003b3c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13184 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 207 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13248 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 9C 2A 00 00 00 00 35 00 00 00 00 00 00 00 00 ..*....5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00002a9c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13248 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 4344 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x10f8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 208 of length 4348 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13312 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 FC 19 00 00 00 00 35 00 00 00 00 00 00 00 00 .......5 ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 4264, incoming data = 4264 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 000019fc [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 4264 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74ed nwritten=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13312 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,51) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,51) wrote 51 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 2504 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x9c8 [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 209 of length 2508 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=2504 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=13376 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2420 (0x974) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 2420 (0x974) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29933 (0x74ED) smb_bcc=2437 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 78 .\.P.I.P .E.\...x [010] 00 05 00 00 02 10 00 00 00 74 09 00 00 3C 01 00 ........ .t...<.. [020] 00 5C 09 00 00 00 00 35 00 00 00 00 00 00 00 00 .\.....5 ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBtrans (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=2420 params=0 setup=2 [2004/07/12 22:36:48, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/07/12 22:36:48, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/07/12 22:36:48, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "spoolss" (pnum 74ed) [2004/07/12 22:36:48, 10] smbd/ipc.c:api_fd_reply(301) api_fd_reply: p:0x8db3b30 max_trans_reply: 4280 [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 2420 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 2420 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 2420 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 2420, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 2404 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 2404 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0974 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 2 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 2404 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 2404, incoming data = 2404 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 0000095c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0035 [2004/07/12 22:36:48, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/07/12 22:36:48, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\spoolss [2004/07/12 22:36:48, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: spoolss op 0x35 - api_rpcTNP: rpc command: SPOOLSS_GETPRINTERDRIVER2 [2004/07/12 22:36:48, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557) api_rpc_cmds[10].fn == 0x8121d30 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_getprinterdriver2 [2004/07/12 22:36:48, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 data1: 00000000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 data2: 00000007 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 data3: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a data4: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000c data5: 5f f6 f2 40 d0 22 00 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 architecture_ptr: 742c1ccc [2004/07/12 22:36:48, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_unistr2 architecture [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 uni_max_len: 0000000f [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c offset : 00000000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 uni_str_len: 0000000f [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0024 buffer : W.i.n.d.o.w.s. .N.T. .x.8.6... [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 level: 00000006 [2004/07/12 22:36:48, 6] rpc_parse/parse_prs.c:prs_debug(82) 000048 spoolss_io_buffer [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0048 ptr: 00ee5008 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 004c size: 00015580 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 155d0 offered: 00015580 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 155d4 clientmajorversion: 00000003 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 155d8 clientminorversion: 00000000 [2004/07/12 22:36:48, 4] rpc_server/srv_spoolss_nt.c:_spoolss_getprinterdriver2(5530) _spoolss_getprinterdriver2 [2004/07/12 22:36:48, 8] param/loadparm.c:get_called_name(4297) get_called_name: assuming that client used IP address [192.168.1.254] as called name. [2004/07/12 22:36:48, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 07 00 00 00 00 00 00 00 5F F6 F2 40 ........ ...._..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:48, 4] rpc_server/srv_spoolss_nt.c:get_printer_snum(431) short name:optraqqq [2004/07/12 22:36:48, 10] printing/nt_printing.c:get_a_printer(3972) get_a_printer: [optraqqq] level 2 [2004/07/12 22:36:48, 8] param/loadparm.c:get_called_name(4297) get_called_name: assuming that client used IP address [192.168.1.254] as called name. [2004/07/12 22:36:48, 8] param/loadparm.c:get_called_name(4297) get_called_name: assuming that client used IP address [192.168.1.254] as called name. [2004/07/12 22:36:48, 10] printing/nt_printing.c:get_a_printer_2_default(3228) get_a_printer_2_default: driver name set to [] [2004/07/12 22:36:48, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc_buf nt_printing_getsec [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 max_len: 00000094 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr : 00000001 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 len : 00000094 [2004/07/12 22:36:48, 7] rpc_parse/parse_prs.c:prs_debug(82) 00000c sec_io_desc sec [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000c revision : 0001 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000e type : 8004 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_owner_sid: 00000078 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 off_grp_sid : 00000000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 off_sacl : 00000000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c off_dacl : 00000014 [2004/07/12 22:36:48, 8] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_dom_sid owner_sid [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0084 sid_rev_num: 01 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0085 num_auths : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0086 id_auth[0] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0087 id_auth[1] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0088 id_auth[2] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0089 id_auth[3] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008a id_auth[4] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008b id_auth[5] : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 008c sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:48, 8] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_acl dacl [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0020 revision: 0002 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0022 size : 0064 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 num_aces : 00000003 [2004/07/12 22:36:48, 9] rpc_parse/parse_prs.c:prs_debug(82) 000028 sec_io_ace ace_list[00]: [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 flags: 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002a size : 0014 [2004/07/12 22:36:48, 10] rpc_parse/parse_prs.c:prs_debug(82) 00002c sec_io_access info [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 002c mask: e0000000 [2004/07/12 22:36:48, 10] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_dom_sid trustee [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0030 sid_rev_num: 01 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0031 num_auths : 01 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0032 id_auth[0] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0033 id_auth[1] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0034 id_auth[2] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0035 id_auth[3] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0036 id_auth[4] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0037 id_auth[5] : 01 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0038 sub_auths : 00000000 [2004/07/12 22:36:48, 9] rpc_parse/parse_prs.c:prs_debug(82) 00003c sec_io_ace ace_list[01]: [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 003c type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 003d flags: 09 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 003e size : 0024 [2004/07/12 22:36:48, 10] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_access info [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0040 mask: 10000000 [2004/07/12 22:36:48, 10] rpc_parse/parse_prs.c:prs_debug(82) 000044 smb_io_dom_sid trustee [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0044 sid_rev_num: 01 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0045 num_auths : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0046 id_auth[0] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0047 id_auth[1] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 id_auth[2] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 id_auth[3] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[4] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[5] : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 004c sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:48, 9] rpc_parse/parse_prs.c:prs_debug(82) 000060 sec_io_ace ace_list[02]: [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0060 type : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0061 flags: 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0062 size : 0024 [2004/07/12 22:36:48, 10] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_access info [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0064 mask: 10000000 [2004/07/12 22:36:48, 10] rpc_parse/parse_prs.c:prs_debug(82) 000068 smb_io_dom_sid trustee [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0068 sid_rev_num: 01 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0069 num_auths : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006a id_auth[0] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006b id_auth[1] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c id_auth[2] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d id_auth[3] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[4] : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[5] : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0070 sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:48, 10] printing/nt_printing.c:nt_printing_getsec(4835) secdesc_ctr for optraqqq has 3 aces: [2004/07/12 22:36:48, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-1-0 0 2 0xe0000000 [2004/07/12 22:36:48, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-5-21-3447701488-1579429421-2438307492-500 0 9 0x10000000 [2004/07/12 22:36:48, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-5-21-3447701488-1579429421-2438307492-500 0 2 0x10000000 [2004/07/12 22:36:48, 10] printing/nt_printing.c:get_a_printer(4055) get_a_printer: [optraqqq] level 2 returning WERR_OK [2004/07/12 22:36:48, 8] rpc_server/srv_spoolss_nt.c:construct_printer_driver_info_6(5310) construct_printer_driver_info_6: status: WERR_OK [2004/07/12 22:36:48, 8] printing/nt_printing.c:get_a_printer_driver_3(1805) get_a_printer_driver_3: [DRIVERS/W32X86/3/] [2004/07/12 22:36:48, 8] rpc_server/srv_spoolss_nt.c:construct_printer_driver_info_6(5317) construct_printer_driver_info_6: status: WERR_UNKNOWN_PRINTER_DRIVER [2004/07/12 22:36:48, 8] printing/nt_printing.c:get_a_printer_driver_3(1805) get_a_printer_driver_3: [DRIVERS/W32X86/2/] [2004/07/12 22:36:48, 8] rpc_server/srv_spoolss_nt.c:construct_printer_driver_info_6(5333) construct_printer_driver_info_6: status: WERR_UNKNOWN_PRINTER_DRIVER [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_r_getprinterdriver2 [2004/07/12 22:36:48, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_buffer [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr: 00ee5008 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 size: 00015580 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 15588 needed: 00000000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 1558c servermajorversion: 00000000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 15590 serverminorversion: 00000000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_werror(695) 15594 status: WERR_UNKNOWN_PRINTER_DRIVER [2004/07/12 22:36:48, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578) api_rpcTNP: called spoolss successfully [2004/07/12 22:36:48, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 662 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 2404 [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 01 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00015598 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..4280] [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4336 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=13376 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 4280 (0x10B8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=4281 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 00 05 00 02 01 10 00 00 00 B8 10 00 00 3C 01 00 ........ .....<.. [010] 00 98 55 01 00 00 00 00 00 08 50 EE 00 80 55 01 ..U..... ..P...U. [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4340) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4340) wrote 4340 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 210 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13440 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 4256, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 000144f8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13440 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] F8 44 01 00 00 00 00 00 00 00 00 00 00 00 00 00 .D...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 211 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13504 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 8512, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00013458 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13504 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 58 34 01 00 00 00 00 00 00 00 00 00 00 00 00 00 X4...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 212 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13568 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 12768, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 000123b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13568 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] B8 23 01 00 00 00 00 00 00 00 00 00 00 00 00 00 .#...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 213 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13632 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 17024, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00011318 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13632 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 18 13 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 214 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13696 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 21280, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00010278 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13696 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 78 02 01 00 00 00 00 00 00 00 00 00 00 00 00 00 x....... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 215 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13760 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 25536, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000f1d8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13760 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] D8 F1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 216 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13824 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 29792, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000e138 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13824 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 38 E1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8....... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 217 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13888 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 34048, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000d098 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13888 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 98 D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 218 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13952 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 38304, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000bff8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13952 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] F8 BF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 219 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14016 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 42560, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000af58 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14016 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 58 AF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 X....... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 220 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14080 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 46816, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00009eb8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14080 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] B8 9E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 221 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14144 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 51072, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00008e18 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14144 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 18 8E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 222 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14208 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 55328, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00007d78 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14208 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 78 7D 00 00 00 00 00 00 00 00 00 00 00 00 00 00 x}...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 223 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14272 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 59584, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00006cd8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14272 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] D8 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .l...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 224 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14336 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 63840, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00005c38 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:48, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14336 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:48, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 38 5C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8\...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:48, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:48, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:48, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:48, 3] smbd/process.c:process_smb(1092) Transaction 225 of length 63 [2004/07/12 22:36:48, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:48, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14400 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:48, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:48, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:48, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:48, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:48, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:48, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 68096, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:48, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00004b98 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14400 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 98 4B 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .K...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:49, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:49, 3] smbd/process.c:process_smb(1092) Transaction 226 of length 63 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14464 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:49, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:49, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 72352, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00003af8 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14464 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] F8 3A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .:...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:49, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:49, 3] smbd/process.c:process_smb(1092) Transaction 227 of length 63 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14528 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:49, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:49, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 76608, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00002a58 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14528 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] 58 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 X*...... ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:49, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:49, 3] smbd/process.c:process_smb(1092) Transaction 228 of length 63 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14592 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:49, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:49, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 80864, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 10b8 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 000019b8 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=4280 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14592 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 3C 01 00 00 ........ ....<... [010] B8 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,4343) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,4343) wrote 4343 [2004/07/12 22:36:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/07/12 22:36:49, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/07/12 22:36:49, 3] smbd/process.c:process_smb(1092) Transaction 229 of length 63 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14657 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29933 (0x74ED) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/07/12 22:36:49, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:49, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 85120, prs_offset(&p->out_data.rdata) = 87448. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0930 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013c [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000918 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74ed min=4280 max=4280 nread=2352 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=2411 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14657 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 2352 (0x930) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=2352 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 05 00 02 02 10 00 00 00 30 09 00 00 3C 01 00 00 ........ 0...<... [010] 18 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,2415) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,2415) wrote 2415 [2004/07/12 22:36:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 128 [2004/07/12 22:36:49, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x80 [2004/07/12 22:36:49, 3] smbd/process.c:process_smb(1092) Transaction 230 of length 132 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=14721 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29933 (0x74ED) smb_bcc=61 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 78 .\.P.I.P .E.\...x [010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 3D 01 00 ........ .,...=.. [020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 07 00 00 ........ ........ [030] 00 00 00 00 00 5F F6 F2 40 D0 22 00 00 ....._.. @.".. [2004/07/12 22:36:49, 3] smbd/process.c:switch_message(887) switch message SMBtrans (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:49, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:49, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=44 params=0 setup=2 [2004/07/12 22:36:49, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/07/12 22:36:49, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/07/12 22:36:49, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/07/12 22:36:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:49, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "spoolss" (pnum 74ed) [2004/07/12 22:36:49, 10] smbd/ipc.c:api_fd_reply(301) api_fd_reply: p:0x8db3b30 max_trans_reply: 4280 [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 44 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 44 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 28 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 002c [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013d [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 28 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28, incoming data = 28 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00000014 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 001d [2004/07/12 22:36:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/07/12 22:36:49, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\spoolss [2004/07/12 22:36:49, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2004/07/12 22:36:49, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557) api_rpc_cmds[3].fn == 0x8121160 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_closeprinter [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 data1: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 data2: 00000007 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 data3: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a data4: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000c data5: 5f f6 f2 40 d0 22 00 00 [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 07 00 00 00 00 00 00 00 5F F6 F2 40 ........ ...._..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 07 00 00 00 00 00 00 00 5F F6 F2 40 ........ ...._..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 07 00 00 00 00 00 00 00 5F F6 F2 40 ........ ...._..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_r_closeprinter [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 data1: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 data2: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 data3: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a data4: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000c data5: 00 00 00 00 00 00 00 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_werror(695) 0014 status: WERR_OK [2004/07/12 22:36:49, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578) api_rpcTNP: called spoolss successfully [2004/07/12 22:36:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 28 [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0030 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013d [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000018 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..48] [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=14721 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 3D 01 00 ........ .0...=.. [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 . [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,108) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,108) wrote 108 [2004/07/12 22:36:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 140 [2004/07/12 22:36:49, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x8c [2004/07/12 22:36:49, 3] smbd/process.c:process_smb(1092) Transaction 231 of length 144 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=140 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=14785 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 56 (0x38) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 56 (0x38) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29933 (0x74ED) smb_bcc=73 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 38 00 00 00 3E 01 00 ........ .8...>.. [020] 00 20 00 00 00 00 00 08 00 00 00 00 00 05 00 00 . ...... ........ [030] 00 00 00 00 00 5C F6 F2 40 D0 22 00 00 02 00 00 .....\.. @."..... [040] 00 00 00 00 00 00 00 00 00 ........ . [2004/07/12 22:36:49, 3] smbd/process.c:switch_message(887) switch message SMBtrans (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:49, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:49, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=56 params=0 setup=2 [2004/07/12 22:36:49, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/07/12 22:36:49, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/07/12 22:36:49, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/07/12 22:36:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:49, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "spoolss" (pnum 74ed) [2004/07/12 22:36:49, 10] smbd/ipc.c:api_fd_reply(301) api_fd_reply: p:0x8db3b30 max_trans_reply: 4280 [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 56 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 56 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 56, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 40 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 40 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0038 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013e [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 40 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 40, incoming data = 40 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00000020 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0008 [2004/07/12 22:36:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/07/12 22:36:49, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\spoolss [2004/07/12 22:36:49, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: spoolss op 0x8 - api_rpcTNP: rpc command: SPOOLSS_GETPRINTER [2004/07/12 22:36:49, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557) api_rpc_cmds[9].fn == 0x8121bc0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_getprinter [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 data1: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 data2: 00000005 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 data3: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a data4: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000c data5: 5c f6 f2 40 d0 22 00 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 level: 00000002 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 spoolss_io_buffer [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 ptr: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c offered: 00000000 [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 05 00 00 00 00 00 00 00 5C F6 F2 40 ........ ....\..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 05 00 00 00 00 00 00 00 5C F6 F2 40 ........ ....\..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 4] rpc_server/srv_spoolss_nt.c:get_printer_snum(431) short name:optraqqq [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(3972) get_a_printer: [optraqqq] level 2 [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(4003) get_a_printer: using cached copy of printer_info_2 [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(4055) get_a_printer: [optraqqq] level 2 returning WERR_OK [2004/07/12 22:36:49, 3] printing/printing.c:print_cache_expired(1861) print cache expired for queue optraqqq (last_qscan_time = 1089664603, time now = 1089664609, qcachetime = 2) [2004/07/12 22:36:49, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1 [2004/07/12 22:36:49, 3] smbd/uid.c:push_conn_ctx(364) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2004/07/12 22:36:49, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/07/12 22:36:49, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/07/12 22:36:49, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/07/12 22:36:49, 10] lib/messages.c:message_send_pid_internal(265) message_send_pid_internal: discarding duplicate message. [2004/07/12 22:36:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0 [2004/07/12 22:36:49, 7] rpc_server/srv_spoolss_nt.c:construct_dev_mode(4116) construct_dev_mode getting printer characteristics [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(3972) get_a_printer: [optraqqq] level 2 [2004/07/12 22:36:49, 8] param/loadparm.c:get_called_name(4297) get_called_name: assuming that client used IP address [192.168.1.254] as called name. [2004/07/12 22:36:49, 8] param/loadparm.c:get_called_name(4297) get_called_name: assuming that client used IP address [192.168.1.254] as called name. [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer_2_default(3228) get_a_printer_2_default: driver name set to [] [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc_buf nt_printing_getsec [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 max_len: 00000094 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr : 00000001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 len : 00000094 [2004/07/12 22:36:49, 7] rpc_parse/parse_prs.c:prs_debug(82) 00000c sec_io_desc sec [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000c revision : 0001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000e type : 8004 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_owner_sid: 00000078 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 off_grp_sid : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 off_sacl : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c off_dacl : 00000014 [2004/07/12 22:36:49, 8] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_dom_sid owner_sid [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0084 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0085 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0086 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0087 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0088 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0089 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008a id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008b id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 008c sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 8] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_acl dacl [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0020 revision: 0002 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0022 size : 0064 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 num_aces : 00000003 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000028 sec_io_ace ace_list[00]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 flags: 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002a size : 0014 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 00002c sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 002c mask: e0000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0030 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0031 num_auths : 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0032 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0033 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0034 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0035 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0036 id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0037 id_auth[5] : 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0038 sub_auths : 00000000 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 00003c sec_io_ace ace_list[01]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 003c type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 003d flags: 09 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 003e size : 0024 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0040 mask: 10000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000044 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0044 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0045 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0046 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0047 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 004c sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000060 sec_io_ace ace_list[02]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0060 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0061 flags: 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0062 size : 0024 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0064 mask: 10000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000068 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0068 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0069 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006a id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006b id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0070 sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 10] printing/nt_printing.c:nt_printing_getsec(4835) secdesc_ctr for optraqqq has 3 aces: [2004/07/12 22:36:49, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-1-0 0 2 0xe0000000 [2004/07/12 22:36:49, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-5-21-3447701488-1579429421-2438307492-500 0 9 0x10000000 [2004/07/12 22:36:49, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-5-21-3447701488-1579429421-2438307492-500 0 2 0x10000000 [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(4055) get_a_printer: [optraqqq] level 2 returning WERR_OK [2004/07/12 22:36:49, 5] rpc_server/srv_spoolss_nt.c:construct_dev_mode(4124) BONG! There was no device mode! [2004/07/12 22:36:49, 8] rpc_server/srv_spoolss_nt.c:construct_printer_info_2(4193) Returning NULL Devicemode! [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_printer_info_2 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 001098 smb_io_unistr servername [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 1098 unistr: \.\.1.9.2...1.6.8...1...2.5.4... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 offset: 00001098 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 001066 smb_io_unistr printername [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 1066 unistr: \.\.1.9.2...1.6.8...1...2.5.4.\.o.p.t.r.a.q.q.q... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 offset: 00001066 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 001054 smb_io_unistr sharename [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 1054 unistr: o.p.t.r.a.q.q.q... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset: 00001054 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 00102e smb_io_unistr portname [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 102e unistr: S.a.m.b.a. .P.r.i.n.t.e.r. .P.o.r.t... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c offset: 0000102e [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 00102c smb_io_unistr drivername [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 102c unistr: .. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 offset: 0000102c [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 001000 smb_io_unistr comment [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 1000 unistr: L.e.x.m.a.r.k. .L.a.s.e.r. .P.r.i.n.t.e.r... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 offset: 00001000 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000ffe smb_io_unistr location [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0ffe unistr: .. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 offset: 00000ffe [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c devmode: 00000000 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000ffc smb_io_unistr sepfile [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0ffc unistr: .. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 offset: 00000ffc [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000fea smb_io_unistr printprocessor [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0fea unistr: w.i.n.p.r.i.n.t... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 offset: 00000fea [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000fe2 smb_io_unistr datatype [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0fe2 unistr: R.A.W... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0028 offset: 00000fe2 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000fe0 smb_io_unistr parameters [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0fe0 unistr: .. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 002c offset: 00000fe0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 sec_desc: 00000000 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_reldevmode devmode [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c offset: 00000000 [2004/07/12 22:36:49, 8] rpc_parse/parse_spoolss.c:smb_io_reldevmode(2329) boing, the devmode was NULL [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_relsecdesc secdesc [2004/07/12 22:36:49, 7] rpc_parse/parse_prs.c:prs_debug(82) 000f4c sec_io_desc secdesc [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0f4c revision : 0001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0f4e type : 8004 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0f50 off_owner_sid: 00000078 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0f54 off_grp_sid : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0f58 off_sacl : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0f5c off_dacl : 00000014 [2004/07/12 22:36:49, 8] rpc_parse/parse_prs.c:prs_debug(82) 000fc4 smb_io_dom_sid owner_sid [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fc4 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fc5 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fc6 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fc7 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fc8 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fc9 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fca id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fcb id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0fcc sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 8] rpc_parse/parse_prs.c:prs_debug(82) 000f60 sec_io_acl dacl [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0f60 revision: 0002 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0f64 num_aces : 00000003 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000f68 sec_io_ace ace_list[00]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f68 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f69 flags: 02 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000f6c sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0f6c mask: e0000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000f70 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f70 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f71 num_auths : 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f72 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f73 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f74 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f75 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f76 id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f77 id_auth[5] : 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0f78 sub_auths : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0f6a size : 0014 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000f7c sec_io_ace ace_list[01]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f7c type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f7d flags: 09 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000f80 sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0f80 mask: 10000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000f84 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f84 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f85 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f86 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f87 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f88 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f89 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f8a id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0f8b id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0f8c sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0f7e size : 0024 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000fa0 sec_io_ace ace_list[02]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fa0 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fa1 flags: 02 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000fa4 sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0fa4 mask: 10000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000fa8 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fa8 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fa9 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0faa id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fab id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fac id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fad id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0fae id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0faf id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0fb0 sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0fa2 size : 0024 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0f62 size : 0064 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 offset: 00000f4c [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 attributes: 00001048 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0038 priority: 00000001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 003c defpriority: 00000001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0040 starttime: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 untiltime: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0048 status: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 004c jobs: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0050 averageppm: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_r_getprinter [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_buffer [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 needed: 000001c0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_werror(695) 0008 status: WERR_INSUFFICIENT_BUFFER [2004/07/12 22:36:49, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578) api_rpcTNP: called spoolss successfully [2004/07/12 22:36:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 6732 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 40 [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 12. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0024 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013e [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000000c [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..36] [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=14785 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 3E 01 00 ........ .$...>.. [010] 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 01 00 ........ ........ [020] 00 7A 00 00 00 .z... [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,96) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,96) wrote 96 [2004/07/12 22:36:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 592 [2004/07/12 22:36:49, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x250 [2004/07/12 22:36:49, 3] smbd/process.c:process_smb(1092) Transaction 232 of length 596 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=592 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=14849 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 508 (0x1FC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 508 (0x1FC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29933 (0x74ED) smb_bcc=525 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 FC 01 00 00 3F 01 00 ........ .....?.. [020] 00 E4 01 00 00 00 00 08 00 00 00 00 00 05 00 00 ........ ........ [030] 00 00 00 00 00 5C F6 F2 40 D0 22 00 00 02 00 00 .....\.. @."..... [040] 00 D0 34 0D 00 C0 01 00 00 00 00 00 00 00 00 00 ..4..... ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2004/07/12 22:36:49, 3] smbd/process.c:switch_message(887) switch message SMBtrans (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:49, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:49, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=508 params=0 setup=2 [2004/07/12 22:36:49, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/07/12 22:36:49, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/07/12 22:36:49, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/07/12 22:36:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:49, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "spoolss" (pnum 74ed) [2004/07/12 22:36:49, 10] smbd/ipc.c:api_fd_reply(301) api_fd_reply: p:0x8db3b30 max_trans_reply: 4280 [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 508 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 508 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 508 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 508, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 492 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 492 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 01fc [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013f [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 492 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 492, incoming data = 492 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 000001e4 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0008 [2004/07/12 22:36:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/07/12 22:36:49, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\spoolss [2004/07/12 22:36:49, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: spoolss op 0x8 - api_rpcTNP: rpc command: SPOOLSS_GETPRINTER [2004/07/12 22:36:49, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557) api_rpc_cmds[9].fn == 0x8121bc0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_getprinter [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 data1: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 data2: 00000005 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 data3: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a data4: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000c data5: 5c f6 f2 40 d0 22 00 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 level: 00000002 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 spoolss_io_buffer [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 ptr: 000d34d0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c size: 000001c0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 01e0 offered: 000001c0 [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 05 00 00 00 00 00 00 00 5C F6 F2 40 ........ ....\..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 05 00 00 00 00 00 00 00 5C F6 F2 40 ........ ....\..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 4] rpc_server/srv_spoolss_nt.c:get_printer_snum(431) short name:optraqqq [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(3972) get_a_printer: [optraqqq] level 2 [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(4003) get_a_printer: using cached copy of printer_info_2 [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(4055) get_a_printer: [optraqqq] level 2 returning WERR_OK [2004/07/12 22:36:49, 3] printing/printing.c:print_cache_expired(1861) print cache expired for queue optraqqq (last_qscan_time = 1089664603, time now = 1089664609, qcachetime = 2) [2004/07/12 22:36:49, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1 [2004/07/12 22:36:49, 3] smbd/uid.c:push_conn_ctx(364) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2004/07/12 22:36:49, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/07/12 22:36:49, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/07/12 22:36:49, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/07/12 22:36:49, 10] lib/messages.c:message_send_pid_internal(265) message_send_pid_internal: discarding duplicate message. [2004/07/12 22:36:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0 [2004/07/12 22:36:49, 7] rpc_server/srv_spoolss_nt.c:construct_dev_mode(4116) construct_dev_mode getting printer characteristics [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(3972) get_a_printer: [optraqqq] level 2 [2004/07/12 22:36:49, 8] param/loadparm.c:get_called_name(4297) get_called_name: assuming that client used IP address [192.168.1.254] as called name. [2004/07/12 22:36:49, 8] param/loadparm.c:get_called_name(4297) get_called_name: assuming that client used IP address [192.168.1.254] as called name. [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer_2_default(3228) get_a_printer_2_default: driver name set to [] [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc_buf nt_printing_getsec [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 max_len: 00000094 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr : 00000001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 len : 00000094 [2004/07/12 22:36:49, 7] rpc_parse/parse_prs.c:prs_debug(82) 00000c sec_io_desc sec [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000c revision : 0001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000e type : 8004 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 off_owner_sid: 00000078 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 off_grp_sid : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 off_sacl : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c off_dacl : 00000014 [2004/07/12 22:36:49, 8] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_dom_sid owner_sid [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0084 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0085 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0086 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0087 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0088 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0089 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008a id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008b id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 008c sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 8] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_acl dacl [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0020 revision: 0002 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0022 size : 0064 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 num_aces : 00000003 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000028 sec_io_ace ace_list[00]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0028 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0029 flags: 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002a size : 0014 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 00002c sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 002c mask: e0000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0030 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0031 num_auths : 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0032 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0033 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0034 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0035 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0036 id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0037 id_auth[5] : 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0038 sub_auths : 00000000 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 00003c sec_io_ace ace_list[01]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 003c type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 003d flags: 09 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 003e size : 0024 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000040 sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0040 mask: 10000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000044 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0044 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0045 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0046 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0047 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 004c sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000060 sec_io_ace ace_list[02]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0060 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0061 flags: 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0062 size : 0024 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000064 sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0064 mask: 10000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000068 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0068 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0069 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006a id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006b id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006c id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006d id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006e id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006f id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0070 sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 10] printing/nt_printing.c:nt_printing_getsec(4835) secdesc_ctr for optraqqq has 3 aces: [2004/07/12 22:36:49, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-1-0 0 2 0xe0000000 [2004/07/12 22:36:49, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-5-21-3447701488-1579429421-2438307492-500 0 9 0x10000000 [2004/07/12 22:36:49, 10] printing/nt_printing.c:nt_printing_getsec(4844) S-1-5-21-3447701488-1579429421-2438307492-500 0 2 0x10000000 [2004/07/12 22:36:49, 10] printing/nt_printing.c:get_a_printer(4055) get_a_printer: [optraqqq] level 2 returning WERR_OK [2004/07/12 22:36:49, 5] rpc_server/srv_spoolss_nt.c:construct_dev_mode(4124) BONG! There was no device mode! [2004/07/12 22:36:49, 8] rpc_server/srv_spoolss_nt.c:construct_printer_info_2(4193) Returning NULL Devicemode! [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_printer_info_2 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 0001a0 smb_io_unistr servername [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 01a0 unistr: \.\.1.9.2...1.6.8...1...2.5.4... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 offset: 000001a0 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 00016e smb_io_unistr printername [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 016e unistr: \.\.1.9.2...1.6.8...1...2.5.4.\.o.p.t.r.a.q.q.q... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 offset: 0000016e [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 00015c smb_io_unistr sharename [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 015c unistr: o.p.t.r.a.q.q.q... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset: 0000015c [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000136 smb_io_unistr portname [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0136 unistr: S.a.m.b.a. .P.r.i.n.t.e.r. .P.o.r.t... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c offset: 00000136 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000134 smb_io_unistr drivername [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0134 unistr: .. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 offset: 00000134 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000108 smb_io_unistr comment [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0108 unistr: L.e.x.m.a.r.k. .L.a.s.e.r. .P.r.i.n.t.e.r... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 offset: 00000108 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000106 smb_io_unistr location [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0106 unistr: .. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 offset: 00000106 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c devmode: 00000000 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000104 smb_io_unistr sepfile [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 0104 unistr: .. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 offset: 00000104 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 0000f2 smb_io_unistr printprocessor [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 00f2 unistr: w.i.n.p.r.i.n.t... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 offset: 000000f2 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 0000ea smb_io_unistr datatype [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 00ea unistr: R.A.W... [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0028 offset: 000000ea [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 0000e8 smb_io_unistr parameters [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_unistr(1088) 00e8 unistr: .. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 002c offset: 000000e8 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 sec_desc: 00000000 [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_reldevmode devmode [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c offset: 00000000 [2004/07/12 22:36:49, 8] rpc_parse/parse_spoolss.c:smb_io_reldevmode(2329) boing, the devmode was NULL [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_relsecdesc secdesc [2004/07/12 22:36:49, 7] rpc_parse/parse_prs.c:prs_debug(82) 000054 sec_io_desc secdesc [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0054 revision : 0001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0056 type : 8004 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0058 off_owner_sid: 00000078 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 005c off_grp_sid : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0060 off_sacl : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0064 off_dacl : 00000014 [2004/07/12 22:36:49, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000cc smb_io_dom_sid owner_sid [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00cc sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00cd num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00ce id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00cf id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00d0 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00d1 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00d2 id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00d3 id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 00d4 sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 8] rpc_parse/parse_prs.c:prs_debug(82) 000068 sec_io_acl dacl [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0068 revision: 0002 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 006c num_aces : 00000003 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000070 sec_io_ace ace_list[00]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 flags: 02 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000074 sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0074 mask: e0000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0078 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0079 num_auths : 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007a id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007b id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007c id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007d id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007e id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 007f id_auth[5] : 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0080 sub_auths : 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0072 size : 0014 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 000084 sec_io_ace ace_list[01]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0084 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0085 flags: 09 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 000088 sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0088 mask: 10000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 00008c smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008c sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008d num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008e id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 008f id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0090 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0091 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0092 id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0093 id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0094 sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0086 size : 0024 [2004/07/12 22:36:49, 9] rpc_parse/parse_prs.c:prs_debug(82) 0000a8 sec_io_ace ace_list[02]: [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00a8 type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00a9 flags: 02 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 0000ac sec_io_access info [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00ac mask: 10000000 [2004/07/12 22:36:49, 10] rpc_parse/parse_prs.c:prs_debug(82) 0000b0 smb_io_dom_sid trustee [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00b0 sid_rev_num: 01 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00b1 num_auths : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00b2 id_auth[0] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00b3 id_auth[1] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00b4 id_auth[2] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00b5 id_auth[3] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00b6 id_auth[4] : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00b7 id_auth[5] : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 00b8 sub_auths : 00000015 cd7fbff0 5e242e2d 91559ea4 000001f4 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 00aa size : 0024 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 006a size : 0064 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 offset: 00000054 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 attributes: 00001048 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0038 priority: 00000001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 003c defpriority: 00000001 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0040 starttime: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 untiltime: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0048 status: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 004c jobs: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0050 averageppm: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_r_getprinter [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_buffer [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr: 000d34d0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 size: 000001c0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 01c8 needed: 000001c0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_werror(695) 01cc status: WERR_OK [2004/07/12 22:36:49, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578) api_rpcTNP: called spoolss successfully [2004/07/12 22:36:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 6732 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 492 [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 464. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 01e8 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 0000013f [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 000001d0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..488] [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=544 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=14849 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 488 (0x1E8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 488 (0x1E8) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=489 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 00 05 00 02 03 10 00 00 00 E8 01 00 00 3F 01 00 ........ .....?.. [010] 00 D0 01 00 00 00 00 00 00 D0 34 0D 00 C0 01 00 ........ ..4..... [020] 00 A0 01 00 00 6E 01 00 00 5C 01 00 00 36 01 00 .....n.. .\...6.. [030] 00 34 01 00 00 08 01 00 00 06 01 00 00 00 00 00 .4...... ........ [040] 00 04 01 00 00 F2 00 00 00 EA 00 00 00 E8 00 00 ........ ........ [050] 00 54 00 00 00 48 10 00 00 01 00 00 00 01 00 00 .T...H.. ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 01 00 04 80 78 00 00 00 00 00 00 ........ .x...... [080] 00 00 00 00 00 14 00 00 00 02 00 64 00 03 00 00 ........ ...d.... [090] 00 00 02 14 00 00 00 00 E0 01 01 00 00 00 00 00 ........ ........ [0A0] 01 00 00 00 00 00 09 24 00 00 00 00 10 01 05 00 .......$ ........ [0B0] 00 00 00 00 05 15 00 00 00 F0 BF 7F CD 2D 2E 24 ........ .....-.$ [0C0] 5E A4 9E 55 91 F4 01 00 00 00 02 24 00 00 00 00 ^..U.... ...$.... [0D0] 10 01 05 00 00 00 00 00 05 15 00 00 00 F0 BF 7F ........ ........ [0E0] CD 2D 2E 24 5E A4 9E 55 91 F4 01 00 00 01 05 00 .-.$^..U ........ [0F0] 00 00 00 00 05 15 00 00 00 F0 BF 7F CD 2D 2E 24 ........ .....-.$ [100] 5E A4 9E 55 91 F4 01 00 00 00 00 52 00 41 00 57 ^..U.... ...R.A.W [110] 00 00 00 77 00 69 00 6E 00 70 00 72 00 69 00 6E ...w.i.n .p.r.i.n [120] 00 74 00 00 00 00 00 00 00 4C 00 65 00 78 00 6D .t...... .L.e.x.m [130] 00 61 00 72 00 6B 00 20 00 4C 00 61 00 73 00 65 .a.r.k. .L.a.s.e [140] 00 72 00 20 00 50 00 72 00 69 00 6E 00 74 00 65 .r. .P.r .i.n.t.e [150] 00 72 00 00 00 00 00 53 00 61 00 6D 00 62 00 61 .r.....S .a.m.b.a [160] 00 20 00 50 00 72 00 69 00 6E 00 74 00 65 00 72 . .P.r.i .n.t.e.r [170] 00 20 00 50 00 6F 00 72 00 74 00 00 00 6F 00 70 . .P.o.r .t...o.p [180] 00 74 00 72 00 61 00 71 00 71 00 71 00 00 00 5C .t.r.a.q .q.q...\ [190] 00 5C 00 31 00 39 00 32 00 2E 00 31 00 36 00 38 .\.1.9.2 ...1.6.8 [1A0] 00 2E 00 31 00 2E 00 32 00 35 00 34 00 5C 00 6F ...1...2 .5.4.\.o [1B0] 00 70 00 74 00 72 00 61 00 71 00 71 00 71 00 00 .p.t.r.a .q.q.q.. [1C0] 00 5C 00 5C 00 31 00 39 00 32 00 2E 00 31 00 36 .\.\.1.9 .2...1.6 [1D0] 00 38 00 2E 00 31 00 2E 00 32 00 35 00 34 00 00 .8...1.. .2.5.4.. [1E0] 00 C0 01 00 00 00 00 00 00 ........ . [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,548) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,548) wrote 548 [2004/07/12 22:36:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 128 [2004/07/12 22:36:49, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x80 [2004/07/12 22:36:49, 3] smbd/process.c:process_smb(1092) Transaction 233 of length 132 [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=14913 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29933 (0x74ED) smb_bcc=61 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 40 01 00 ........ .,...@.. [020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 05 00 00 ........ ........ [030] 00 00 00 00 00 5C F6 F2 40 D0 22 00 00 .....\.. @.".. [2004/07/12 22:36:49, 3] smbd/process.c:switch_message(887) switch message SMBtrans (pid 8912) conn 0x8db5f20 [2004/07/12 22:36:49, 4] smbd/uid.c:change_to_user(193) change_to_user: Skipping user change - already user [2004/07/12 22:36:49, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=44 params=0 setup=2 [2004/07/12 22:36:49, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/07/12 22:36:49, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/07/12 22:36:49, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/07/12 22:36:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157) search for pipe pnum=74ed [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1161) pipe name spoolss pnum=74ed (pipes_open=1) [2004/07/12 22:36:49, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "spoolss" (pnum 74ed) [2004/07/12 22:36:49, 10] smbd/ipc.c:api_fd_reply(301) api_fd_reply: p:0x8db3b30 max_trans_reply: 4280 [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74ed name: spoolss open: Yes len: 44 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 44 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 28 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 002c [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000140 [2004/07/12 22:36:49, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 28 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28, incoming data = 28 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00000014 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 001d [2004/07/12 22:36:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/07/12 22:36:49, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\spoolss [2004/07/12 22:36:49, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2004/07/12 22:36:49, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557) api_rpc_cmds[3].fn == 0x8121160 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_closeprinter [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 data1: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 data2: 00000005 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 data3: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a data4: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000c data5: 5c f6 f2 40 d0 22 00 00 [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 05 00 00 00 00 00 00 00 5C F6 F2 40 ........ ....\..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 05 00 00 00 00 00 00 00 5C F6 F2 40 ........ ....\..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 05 00 00 00 00 00 00 00 5C F6 F2 40 ........ ....\..@ [010] D0 22 00 00 .".. [2004/07/12 22:36:49, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_r_closeprinter [2004/07/12 22:36:49, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 data1: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 data2: 00000000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 data3: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a data4: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000c data5: 00 00 00 00 00 00 00 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_werror(695) 0014 status: WERR_OK [2004/07/12 22:36:49, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578) api_rpcTNP: called spoolss successfully [2004/07/12 22:36:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 28 [2004/07/12 22:36:49, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74ed name: spoolss len: 4280 [2004/07/12 22:36:49, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0030 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000140 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000018 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/07/12 22:36:49, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/07/12 22:36:49, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..48] [2004/07/12 22:36:49, 5] lib/util.c:show_msg(443) [2004/07/12 22:36:49, 5] lib/util.c:show_msg(453) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=2836 smb_uid=100 smb_mid=14913 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2004/07/12 22:36:49, 10] lib/util.c:dump_data(1839) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 40 01 00 ........ .0...@.. [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 . [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(449) write_socket(22,108) [2004/07/12 22:36:49, 6] lib/util_sock.c:write_socket(452) write_socket(22,108) wrote 108 [2004/07/12 22:36:49, 10] smbd/process.c:async_processing(282) async_processing: Doing async processing. [2004/07/12 22:36:49, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/07/12 22:36:49, 10] lib/messages.c:message_dispatch(433) message_dispatch: received_signal = 1 [2004/07/12 22:36:49, 10] lib/messages.c:message_dispatch(442) message_dispatch: received msg_type=1 src_pid=8917 [2004/07/12 22:36:49, 10] lib/messages.c:message_dispatch(446) message_dispatch: processing message of type 1. [2004/07/12 22:36:49, 3] lib/debug.c:debug_message(464) INFO: Remote set of debug to `0' (pid 8912 from pid 8917)