[2010/12/03 16:16:10, 0] smbd/server.c:1065(main) smbd version 3.4.3-1.19.1-2426-SUSE-CODE11 started. Copyright Andrew Tridgell and the Samba Team 1992-2009 [2010/12/03 16:16:10, 5] lib/debug.c:407(debug_dump_status) INFO: Current debug levels: all: True/99 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter idmap domains = ALLDOMAINS [2010/12/03 16:16:10, 1] param/loadparm.c:6378(map_parameter) Unknown parameter encountered: "idmap domains" [2010/12/03 16:16:10, 0] param/loadparm.c:7472(lp_do_parameter) Ignoring unknown parameter "idmap domains" doing parameter idmap config ALLDOMAINS:default = yes doing parameter idmap config ALLDOMAINS:backend = ldap doing parameter idmap config ALLDOMAINS:ldap_base_dn = ou=Idmap,dc=site doing parameter idmap config ALLDOMAINS:ldap_url = ldap://localhost/ doing parameter idmap config ALLDOMAINS:range = 100000-200000 doing parameter idmap alloc backend = ldap doing parameter idmap alloc config:ldap_base_dn = ou=Idmap,dc=site doing parameter idmap alloc config:ldap_url = ldap://localhost doing parameter idmap alloc config:range = 100000-200000 [2010/12/03 16:16:24, 4] param/loadparm.c:9074(lp_load_ex) pm_process() returned Yes [2010/12/03 16:16:24, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find homes [2010/12/03 16:16:24, 10] param/loadparm.c:8287(set_server_role) set_server_role: role = ROLE_DOMAIN_PDC [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS-2LE [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS-2LE [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-16LE [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-16LE [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS-2BE [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS-2BE [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-16BE [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-16BE [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF8 [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF8 [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-8 [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-8 [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset ASCII [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset ASCII [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset 646 [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset 646 [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset ISO-8859-1 [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset ISO-8859-1 [2010/12/03 16:16:24, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS2-HEX [2010/12/03 16:16:24, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS2-HEX [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:24, 2] lib/tallocmsg.c:106(register_msg_pool_usage) Registered MSG_REQ_POOL_USAGE [2010/12/03 16:16:24, 2] lib/dmallocmsg.c:77(register_dmalloc_msgs) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2010/12/03 16:16:24, 3] param/loadparm.c:9039(lp_load_ex) lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) [2010/12/03 16:16:24, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2010/12/03 16:16:24, 3] param/loadparm.c:7726(do_section) Processing section "[global]" doing parameter workgroup = NSTA doing parameter printing = cups doing parameter printcap name = cups doing parameter printcap cache time = 750 doing parameter cups options = raw doing parameter map to guest = Bad User doing parameter include = /etc/samba/dhcp.conf [2010/12/03 16:16:24, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/dhcp.conf" doing parameter wins server = eth0:149.44.160.146 doing parameter logon path = \\%L\profiles\.msprofile doing parameter logon home = \\%L\%U\.9xprofile doing parameter logon drive = P: doing parameter usershare allow guests = Yes doing parameter domain logons = Yes doing parameter domain master = Yes doing parameter ldap admin dn = cn=Administrator,dc=site doing parameter ldap group suffix = ou=group doing parameter ldap idmap suffix = ou=Idmap doing parameter ldap machine suffix = ou=Machines doing parameter ldap passwd sync = Yes doing parameter ldap ssl = Off doing parameter ldap suffix = dc=site doing parameter ldap user suffix = ou=people doing parameter local master = Yes doing parameter os level = 65 doing parameter passdb backend = ldapsam:ldap://localhost doing parameter preferred master = Yes doing parameter security = user doing parameter wins server = doing parameter wins support = No doing parameter add user script = ldapsmb -a -u doing parameter delete user script = ldapsmb -d -u doing parameter add group script = ldapsmb -a -g doing parameter delete group script = ldapsmb -d -g doing parameter add user to group script = ldapsmb -j -u doing parameter delete user from group script = ldapsmb -r -u doing parameter set primary group script = ldapsmb -m -u doing parameter add machine script = ldapsmb -a -wks %m$ doing parameter log level = 99 [2010/12/03 16:16:24, 5] lib/debug.c:407(debug_dump_status) INFO: Current debug levels: all: True/99 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter idmap domains = ALLDOMAINS [2010/12/03 16:16:24, 1] param/loadparm.c:6378(map_parameter) Unknown parameter encountered: "idmap domains" [2010/12/03 16:16:24, 0] param/loadparm.c:7472(lp_do_parameter) Ignoring unknown parameter "idmap domains" doing parameter idmap config ALLDOMAINS:default = yes doing parameter idmap config ALLDOMAINS:backend = ldap doing parameter idmap config ALLDOMAINS:ldap_base_dn = ou=Idmap,dc=site doing parameter idmap config ALLDOMAINS:ldap_url = ldap://localhost/ doing parameter idmap config ALLDOMAINS:range = 100000-200000 doing parameter idmap alloc backend = ldap doing parameter idmap alloc config:ldap_base_dn = ou=Idmap,dc=site doing parameter idmap alloc config:ldap_url = ldap://localhost doing parameter idmap alloc config:range = 100000-200000 [2010/12/03 16:16:30, 2] param/loadparm.c:7743(do_section) Processing section "[homes]" [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 0 for homes [2010/12/03 16:16:30, 10] param/loadparm.c:6085(hash_a_service) hash_a_service: creating servicehash [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 0 for service name homes doing parameter comment = Home Directories doing parameter valid users = %S, %D%w%S doing parameter browseable = No doing parameter read only = No doing parameter inherit acls = Yes [2010/12/03 16:16:30, 2] param/loadparm.c:7743(do_section) Processing section "[profiles]" [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 1 for profiles [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 1 for service name profiles doing parameter comment = Network Profiles Service doing parameter path = %H doing parameter read only = No doing parameter store dos attributes = Yes doing parameter create mask = 0600 doing parameter directory mask = 0700 [2010/12/03 16:16:30, 2] param/loadparm.c:7743(do_section) Processing section "[users]" [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 2 for users [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 2 for service name users doing parameter comment = All users doing parameter path = /home doing parameter read only = No doing parameter inherit acls = Yes doing parameter veto files = /aquota.user/groups/shares/ [2010/12/03 16:16:30, 2] param/loadparm.c:7743(do_section) Processing section "[groups]" [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 3 for groups [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 3 for service name groups doing parameter comment = All groups doing parameter path = /home/groups doing parameter read only = No doing parameter inherit acls = Yes [2010/12/03 16:16:30, 2] param/loadparm.c:7743(do_section) Processing section "[printers]" [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 4 for printers [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 4 for service name printers doing parameter comment = All Printers doing parameter path = /var/tmp doing parameter printable = Yes doing parameter create mask = 0600 doing parameter browseable = No [2010/12/03 16:16:30, 2] param/loadparm.c:7743(do_section) Processing section "[print$]" [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 5 for print$ [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 5 for service name print$ doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter write list = @ntadmin root doing parameter force group = ntadmin doing parameter create mask = 0664 doing parameter directory mask = 0775 [2010/12/03 16:16:30, 2] param/loadparm.c:7743(do_section) Processing section "[netlogon]" [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 6 for netlogon [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 6 for service name netlogon doing parameter comment = Network Logon Service doing parameter path = /var/lib/samba/netlogon doing parameter write list = root [2010/12/03 16:16:30, 4] param/loadparm.c:9074(lp_load_ex) pm_process() returned Yes [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 7 for IPC$ [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 7 for service name IPC$ [2010/12/03 16:16:30, 3] param/loadparm.c:6197(lp_add_ipc) adding IPC service [2010/12/03 16:16:30, 10] param/loadparm.c:8287(set_server_role) set_server_role: role = ROLE_DOMAIN_PDC [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 3] printing/pcap.c:136(pcap_cache_reload) reloading printcap cache [2010/12/03 16:16:30, 5] printing/print_cups.c:403(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2010/12/03 16:16:30, 10] printing/print_cups.c:420(cups_pcap_load_async) cups_pcap_load_async: child pid = 4321 [2010/12/03 16:16:30, 10] printing/print_cups.c:571(cups_cache_reload) cups_cache_reload: sync read on fd 4 [2010/12/03 16:16:30, 5] printing/print_cups.c:453(cups_async_callback) cups_async_callback: callback received for printer data. fd = 4 [2010/12/03 16:16:30, 5] printing/print_cups.c:164(cups_cache_reload_async) reloading cups printcap cache [2010/12/03 16:16:30, 10] printing/print_cups.c:87(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 9 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 9 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 20 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 20 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name zz_null_ [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name zz_null_ [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info zz_null_ Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info zz_null_ Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 12 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 12 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 40 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 40 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name wwilde_test [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name wwilde_test [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 20 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 20 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 20 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 20 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name Virtual_PDF_Printer [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name Virtual_PDF_Printer [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info Virtual PDF Printer [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info Virtual PDF Printer [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 7 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 7 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 35 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 35 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name sw_K_6 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name sw_K_6 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 8 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 8 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name sw_3_15 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name sw_3_15 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 50 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 50 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name kyocera_msrex [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name kyocera_msrex [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 16 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 16 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 83 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 83 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name hp@e241.suse.de [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name hp@e241.suse.de [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 3 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 3 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 83 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 83 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name hp [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name hp [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 8 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 8 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name empfang [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name empfang [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info empfang HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info empfang HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 9 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 9 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 9 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 9 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name CUPS-PDF [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name CUPS-PDF [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info CUPS-PDF [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info CUPS-PDF [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 12 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 12 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 26 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 26 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_empfang [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_empfang [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_empfang Xerox xrx7242 [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_empfang Xerox xrx7242 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 39 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 39 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_2_34 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_2_34 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 37 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 37 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_2_28 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_2_28 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 35 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 35 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_1_37 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_1_37 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_2_2_floor [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_2_2_floor [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 39 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 39 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_2_1_37 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_2_1_37 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 40 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 40 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_1_1_floor [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_1_1_floor [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 41 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 41 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_floor [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_floor [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 41 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 41 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_34_hp [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_34_hp [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_32 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_32 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_31 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_31 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_03 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_03 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_1_02 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_1_02 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_3_01 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_3_01 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_21 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_21 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_12 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_12 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_10 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_10 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 33 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 33 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_37 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_37 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_33 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_33 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_06 [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_06 [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_1_1_floor [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_1_1_floor [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 7 [2010/12/03 16:16:30, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 7 [2010/12/03 16:16:30, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 18 [2010/12/03 16:16:30, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 18 [2010/12/03 16:16:30, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name _null_ [2010/12/03 16:16:30, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name _null_ [2010/12/03 16:16:30, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info _null_ Postscript [2010/12/03 16:16:30, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info _null_ Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:16:30, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:16:30, 3] printing/pcap.c:243(pcap_cache_reload) reload status: ok [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find zz_null_ [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 8 for zz_null_ [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 8 for service name zz_null_ [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service zz_null_ [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find wwilde_test [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 9 for wwilde_test [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 9 for service name wwilde_test [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service wwilde_test [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find Virtual_PDF_Printer [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 10 for Virtual_PDF_Printer [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 10 for service name Virtual_PDF_Printer [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service Virtual_PDF_Printer [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find sw_K_6 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 11 for sw_K_6 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 11 for service name sw_K_6 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service sw_K_6 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find sw_3_15 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 12 for sw_3_15 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 12 for service name sw_3_15 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service sw_3_15 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find kyocera_msrex [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 13 for kyocera_msrex [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 13 for service name kyocera_msrex [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service kyocera_msrex [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find hp@e241.suse.de [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 14 for hp@e241.suse.de [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 14 for service name hp@e241.suse.de [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service hp@e241.suse.de [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find hp [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 15 for hp [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 15 for service name hp [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service hp [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find empfang [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 16 for empfang [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 16 for service name empfang [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service empfang [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find CUPS-PDF [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 17 for CUPS-PDF [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 17 for service name CUPS-PDF [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service CUPS-PDF [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find col_empfang [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 18 for col_empfang [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 18 for service name col_empfang [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service col_empfang [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find col_3_2_34 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 19 for col_3_2_34 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 19 for service name col_3_2_34 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service col_3_2_34 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find col_3_2_28 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 20 for col_3_2_28 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 20 for service name col_3_2_28 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service col_3_2_28 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find col_3_1_37 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 21 for col_3_1_37 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 21 for service name col_3_1_37 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service col_3_1_37 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find col_2_2_floor [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 22 for col_2_2_floor [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 22 for service name col_2_2_floor [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service col_2_2_floor [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find col_2_1_37 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 23 for col_2_1_37 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 23 for service name col_2_1_37 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service col_2_1_37 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find col_1_1_floor [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 24 for col_1_1_floor [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 24 for service name col_1_1_floor [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service col_1_1_floor [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_3_2_floor [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 25 for bw_3_2_floor [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 25 for service name bw_3_2_floor [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_3_2_floor [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_3_2_34_hp [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 26 for bw_3_2_34_hp [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 26 for service name bw_3_2_34_hp [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_3_2_34_hp [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_3_2_32 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 27 for bw_3_2_32 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 27 for service name bw_3_2_32 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_3_2_32 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_3_2_31 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 28 for bw_3_2_31 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 28 for service name bw_3_2_31 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_3_2_31 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_3_2_03 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 29 for bw_3_2_03 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 29 for service name bw_3_2_03 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_3_2_03 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_3_1_02 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 30 for bw_3_1_02 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 30 for service name bw_3_1_02 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_3_1_02 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_2_3_01 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 31 for bw_2_3_01 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 31 for service name bw_2_3_01 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_2_3_01 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_2_2_21 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 32 for bw_2_2_21 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 32 for service name bw_2_2_21 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_2_2_21 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_2_2_12 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 33 for bw_2_2_12 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 33 for service name bw_2_2_12 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_2_2_12 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_2_2_10 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 34 for bw_2_2_10 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 34 for service name bw_2_2_10 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_2_2_10 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_2_1_37 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 35 for bw_2_1_37 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 35 for service name bw_2_1_37 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_2_1_37 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_2_1_33 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 36 for bw_2_1_33 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 36 for service name bw_2_1_33 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_2_1_33 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_2_1_06 [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 37 for bw_2_1_06 [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 37 for service name bw_2_1_06 [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_2_1_06 [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find bw_1_1_floor [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 38 for bw_1_1_floor [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 38 for service name bw_1_1_floor [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service bw_1_1_floor [2010/12/03 16:16:30, 7] param/loadparm.c:9279(lp_servicenumber) lp_servicenumber: couldn't find _null_ [2010/12/03 16:16:30, 8] param/loadparm.c:6047(add_a_service) add_a_service: Creating snum = 39 for _null_ [2010/12/03 16:16:30, 10] param/loadparm.c:6094(hash_a_service) hash_a_service: hashing index 39 for service name _null_ [2010/12/03 16:16:30, 3] param/loadparm.c:6236(lp_add_printer) adding printer service _null_ [2010/12/03 16:16:30, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:16:30, 2] lib/interface.c:340(add_interface) added interface eth0 ip=fe80::5054:ff:fe16:e872%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2010/12/03 16:16:30, 2] lib/interface.c:340(add_interface) added interface eth0 ip=10.10.100.228 bcast=10.10.255.255 netmask=255.255.0.0 [2010/12/03 16:16:30, 5] lib/util.c:266(init_names) Netbios name list:- my_netbios_names[0]="NSTA-DC" [2010/12/03 16:16:30, 3] smbd/server.c:1107(main) loaded services [2010/12/03 16:16:30, 3] smbd/server.c:1122(main) Becoming a daemon. [2010/12/03 16:16:30, 8] ../lib/util/util.c:243(fcntl_lock) fcntl_lock 10 6 0 1 1 [2010/12/03 16:16:30, 8] ../lib/util/util.c:278(fcntl_lock) fcntl_lock: Lock call successful [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend ldapsam [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'ldapsam' [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend ldapsam_compat [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'ldapsam_compat' [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend NDS_ldapsam [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'NDS_ldapsam' [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend NDS_ldapsam_compat [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'NDS_ldapsam_compat' [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend smbpasswd [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'smbpasswd' [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend tdbsam [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'tdbsam' [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend wbc_sam [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'wbc_sam' [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:133(make_pdb_method_name) Attempting to find a passdb backend to match ldapsam:ldap://localhost (ldapsam) [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:154(make_pdb_method_name) Found pdb backend ldapsam [2010/12/03 16:16:30, 2] lib/smbldap_util.c:277(smbldap_search_domain_info) smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=NSTA))] [2010/12/03 16:16:30, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaDomain)(sambaDomainName=NSTA))], scope => [2] [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/03 16:16:30, 5] lib/smbldap.c:1163(smbldap_close) The connection to the LDAP server was closed [2010/12/03 16:16:30, 10] lib/smbldap.c:676(smb_ldap_setup_conn) smb_ldap_setup_connection: ldap://localhost [2010/12/03 16:16:30, 2] lib/smbldap.c:856(smbldap_open_connection) smbldap_open_connection: connection opened [2010/12/03 16:16:30, 10] lib/smbldap.c:1021(smbldap_connect_system) ldap_connect_system: Binding to ldap server ldap://localhost as "cn=Administrator,dc=site" [2010/12/03 16:16:30, 3] lib/smbldap.c:1067(smbldap_connect_system) ldap_connect_system: successful connection to the LDAP server ldap_connect_system: LDAP server does support paged results [2010/12/03 16:16:30, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbldap_idle_fn": 0x7f15a0b53ba0 [2010/12/03 16:16:30, 4] lib/smbldap.c:1143(smbldap_open) The LDAP server is successfully connected [2010/12/03 16:16:30, 5] passdb/pdb_interface.c:165(make_pdb_method_name) pdb backend ldapsam:ldap://localhost has a valid init [2010/12/03 16:16:30, 5] lib/gencache.c:61(gencache_init) Opening cache file at /var/lib/samba/gencache.tdb [2010/12/03 16:16:30, 5] libsmb/namecache.c:59(namecache_enable) namecache_enable: enabling netbios namecache, timeout 660 seconds [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:73(reghook_cache_init) reghook_cache_init: new tree with default ops 0x7f15a0ae22e0 for key [] [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 15) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 12) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 31) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 19) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/03 16:16:30, 10] registry/reg_backend_db.c:1488(regdb_fetch_values) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 29) -> 29 [2010/12/03 16:16:30, 8] registry/reg_backend_db.c:1436(regdb_unpack_values) specific: [Samba Printer Port], len: 2 [2010/12/03 16:16:30, 10] registry/reg_backend_db.c:1488(regdb_fetch_values) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 104) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 100) -> 100 [2010/12/03 16:16:30, 8] registry/reg_backend_db.c:1436(regdb_unpack_values) specific: [DefaultSpoolDirectory], len: 70 [2010/12/03 16:16:30, 10] registry/reg_backend_db.c:1488(regdb_fetch_values) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/03 16:16:30, 8] registry/reg_backend_db.c:1436(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/03 16:16:30, 8] registry/reg_backend_db.c:1436(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/03 16:16:30, 10] registry/reg_backend_db.c:1488(regdb_fetch_values) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/03 16:16:30, 8] registry/reg_backend_db.c:1436(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/03 16:16:30, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/03 16:16:30, 8] registry/reg_backend_db.c:1436(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae2580 for key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [NULL]! [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [HKLM]! [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [SYSTEM]! [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Control] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [CurrentControlSet]! [Control] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Print] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Control]! [Print] [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae2580 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [SOFTWARE], child -> [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [SOFTWARE]! [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Windows NT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Microsoft]! [Windows NT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [CurrentVersion] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Windows NT]! [CurrentVersion] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Print] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [CurrentVersion]! [Print] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Printers] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Print]! [Printers] [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae2580 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Print] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Ports] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Ports], child -> [Print] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae25e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Services] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Services], child -> [Control] [2010/12/03 16:16:30, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [LanmanServer] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Services]! [LanmanServer] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Shares] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [LanmanServer]! [Shares] [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae23e0 for key [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Samba] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Samba], child -> [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [smbconf] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Samba]! [smbconf] [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Samba/smbconf] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae2640 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Netlogon] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Netlogon], child -> [LanmanServer] [2010/12/03 16:16:30, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Parameters] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Netlogon]! [Parameters] [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae26a0 for key [/HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Control] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Print] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [ProductOptions] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [ProductOptions], child -> [Print] [2010/12/03 16:16:30, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae2700 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Tcpip] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Tcpip], child -> [Netlogon] [2010/12/03 16:16:30, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [2] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [2]) [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Parameters] [2010/12/03 16:16:30, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Tcpip]! [Parameters] [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae2760 for key [/HKPT] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [HKPT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [HKPT], child -> [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKPT] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae27c0 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f15a0ae2820 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib] [2010/12/03 16:16:30, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/03 16:16:30, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Ports] [2010/12/03 16:16:30, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Perflib] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Print] [2010/12/03 16:16:30, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Ports] [2010/12/03 16:16:30, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/03 16:16:30, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib] to tree [2010/12/03 16:16:30, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/03 16:16:30, 20] registry/reg_cachehook.c:144(reghook_dump_cache) reghook_dump_cache: Starting cache dump now... [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/: [HKLM] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/: [SOFTWARE] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/: [Microsoft] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/: [Windows NT] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/: [CurrentVersion] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Perflib] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Ports] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Print] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/: [Printers] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/: [Samba] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Samba/: [smbconf] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/: [SYSTEM] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/: [CurrentControlSet] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/: [Control] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [Print] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [ProductOptions] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/: [Services] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [LanmanServer] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/: [Shares] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Netlogon] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/: [Parameters] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Tcpip] (NULL) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/: [Parameters] (data) [2010/12/03 16:16:30, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/: [HKPT] (data) [2010/12/03 16:16:30, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/UID2SID/0, value = S-1-5-21-2207529392-607014842-3643267381-1000, timeout = Mon Dec 6 18:41:48 2010 [2010/12/03 16:16:30, 10] passdb/lookup_sid.c:1341(uid_to_sid) uid 0 -> sid S-1-5-21-2207529392-607014842-3643267381-1000 [2010/12/03 16:16:30, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/GID2SID/0, value = -, timeout = Fri Dec 3 16:17:10 2010 [2010/12/03 16:16:30, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:30, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:30, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:30, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:30, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:30, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=0))], scope => [2] [2010/12/03 16:16:30, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:30, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=0)) [2010/12/03 16:16:30, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:30, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid) LEGACY: gid 0 -> sid S-1-22-2-0 [2010/12/03 16:16:30, 10] auth/token_util.c:353(create_local_nt_token) Create local NT token for S-1-5-21-2207529392-607014842-3643267381-1000 [2010/12/03 16:16:30, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-544, value = 100000, timeout = Mon Dec 6 17:15:13 2010 [2010/12/03 16:16:30, 10] passdb/lookup_sid.c:1517(sid_to_gid) sid S-1-5-32-544 -> gid 100000 [2010/12/03 16:16:30, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-545, value = 100001, timeout = Mon Dec 6 16:37:51 2010 [2010/12/03 16:16:30, 10] passdb/lookup_sid.c:1517(sid_to_gid) sid S-1-5-32-545 -> gid 100001 [2010/12/03 16:16:30, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:30, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:30, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:30, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:30, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:30, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-2207529392-607014842-3643267381-1000)(sambaSIDList=S-1-5-32-544)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)))], scope => [2] [2010/12/03 16:16:30, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:30, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-2207529392-607014842-3643267381-1000)(sambaSIDList=S-1-5-32-544)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)))], scope => [2] [2010/12/03 16:16:30, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:33, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-2207529392-607014842-3643267381-1000] [2010/12/03 16:16:33, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-5-32-544 Privilege set: SE_PRIV 0xff0 0x0 0x0 0x0 [2010/12/03 16:16:33, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/03 16:16:33, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/12/03 16:16:33, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-11] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (1) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1525(regdb_store_values) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 48 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -155) -> 76 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -231) -> 126 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 357) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 353) -> 18 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 335) -> 17 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 318) -> 25 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 293) -> 43 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 250) -> 48 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 202) -> 76 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 126) -> 126 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [0] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1525(regdb_store_values) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1525(regdb_store_values) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 40 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -147) -> 76 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -223) -> 186 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 409) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 405) -> 18 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 387) -> 17 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 370) -> 25 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 345) -> 43 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 302) -> 40 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 262) -> 76 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 186) -> 186 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Security], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Parameters] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [0] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1525(regdb_store_values) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1525(regdb_store_values) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 68 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -175) -> 76 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -251) -> 146 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 397) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 393) -> 18 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 375) -> 17 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 358) -> 25 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 333) -> 43 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 290) -> 68 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 222) -> 76 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 146) -> 146 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [0] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1525(regdb_store_values) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1525(regdb_store_values) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 94 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -201) -> 76 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -277) -> 200 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 477) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 473) -> 18 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 455) -> 17 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 438) -> 25 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 413) -> 43 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 370) -> 94 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 276) -> 76 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 200) -> 200 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 7 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [3] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [2] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 78) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 74) -> 13 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 61) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 6 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 46) -> 9 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 8 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 29) -> 15 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 14) -> 5 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [8] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [1] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 110) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:440(regdb_open) regdb_open: incrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/03 16:16:33, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS/Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/03 16:16:33, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [Security] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/03 16:16:33, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/03 16:16:33, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/03 16:16:33, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/03 16:16:33, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/03 16:16:33, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f15a0ae22e0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1355(regdb_fetch_keys) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/03 16:16:33, 11] registry/reg_backend_db.c:1389(regdb_fetch_keys) regdb_fetch_keys: Exit [0] items [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (4) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (3) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:1525(regdb_store_values) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/03 16:16:33, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/03 16:16:33, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (2) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (1) [2010/12/03 16:16:33, 10] registry/reg_backend_db.c:474(regdb_close) regdb_close: decrementing refcount (0) [2010/12/03 16:16:33, 10] printing/nt_printing.c:700(update_c_setprinter) update_c_setprinter: c_setprinter = 0 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:33, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:33, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:33, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:33, 6] passdb/pdb_interface.c:279(pdb_getsampwsid) pdb_getsampwsid: Building guest account [2010/12/03 16:16:33, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:16:33, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:16:33, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:16:33, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:16:33, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:16:33, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 14 -> now DEFAULT [2010/12/03 16:16:33, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:16:33, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 18 -> now DEFAULT [2010/12/03 16:16:33, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:33, 10] lib/system_smbd.c:122(sys_getgrouplist) sys_getgrouplist: user [nobody] [2010/12/03 16:16:33, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/GID2SID/65533, value = -, timeout = Fri Dec 3 16:17:14 2010 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:33, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:33, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:33, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:33, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65533))], scope => [2] [2010/12/03 16:16:33, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:33, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65533)) [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:33, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid) LEGACY: gid 65533 -> sid S-1-22-2-65533 [2010/12/03 16:16:33, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/GID2SID/65534, value = -, timeout = Fri Dec 3 16:17:15 2010 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:33, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:33, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:33, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:33, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65534))], scope => [2] [2010/12/03 16:16:33, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:33, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65534)) [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:33, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid) LEGACY: gid 65534 -> sid S-1-22-2-65534 [2010/12/03 16:16:33, 5] auth/auth_util.c:646(make_server_info_sam) make_server_info_sam: made server info for user nobody -> nobody [2010/12/03 16:16:33, 10] auth/token_util.c:353(create_local_nt_token) Create local NT token for S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:33, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:33, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:33, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:33, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:33, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-2207529392-607014842-3643267381-501)(sambaSIDList=S-1-22-2-65533)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)(sambaSIDList=S-1-22-2-65534)))], scope => [2] [2010/12/03 16:16:33, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:35, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-2207529392-607014842-3643267381-501)(sambaSIDList=S-1-22-2-65533)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)(sambaSIDList=S-1-22-2-65534)))], scope => [2] [2010/12/03 16:16:35, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:35, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-2207529392-607014842-3643267381-501] [2010/12/03 16:16:35, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-65533] [2010/12/03 16:16:35, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/03 16:16:35, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/12/03 16:16:35, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2010/12/03 16:16:35, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-65534] [2010/12/03 16:16:35, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/SID2GID/S-1-1-0, value = -1, timeout = Fri Dec 3 16:17:19 2010 [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:35, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:35, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:35, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:35, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2] [2010/12/03 16:16:35, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:35, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0)) [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:35, 10] passdb/lookup_sid.c:1255(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-1-0 [2010/12/03 16:16:35, 10] auth/auth_util.c:750(create_local_token) Could not convert SID S-1-1-0 to gid, ignoring it [2010/12/03 16:16:35, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-2, value = -1, timeout = Fri Dec 3 16:17:19 2010 [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:35, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:35, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:35, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:35, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2] [2010/12/03 16:16:35, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:35, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2)) [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:35, 10] passdb/lookup_sid.c:1255(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-2 [2010/12/03 16:16:35, 10] auth/auth_util.c:750(create_local_token) Could not convert SID S-1-5-2 to gid, ignoring it [2010/12/03 16:16:35, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-546, value = -1, timeout = Fri Dec 3 16:17:21 2010 [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:16:35, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:16:35, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:16:35, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:16:35, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))], scope => [2] [2010/12/03 16:16:35, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:16:35, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546)) [2010/12/03 16:16:35, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:16:35, 10] passdb/lookup_sid.c:1255(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-546 [2010/12/03 16:16:35, 10] auth/auth_util.c:750(create_local_token) Could not convert SID S-1-5-32-546 to gid, ignoring it [2010/12/03 16:16:35, 10] auth/token_util.c:528(debug_nt_user_token) NT user token of user S-1-5-21-2207529392-607014842-3643267381-501 contains 7 SIDs SID[ 0]: S-1-5-21-2207529392-607014842-3643267381-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/03 16:16:35, 10] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/03 16:16:35, 3] printing/printing.c:1415(start_background_queue) start_background_queue: Starting background LPQ thread [2010/12/03 16:16:35, 10] lib/util_sock.c:951(open_socket_in) bind succeeded on port 445 [2010/12/03 16:16:35, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:16:35, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:16:35, 10] lib/util_sock.c:951(open_socket_in) bind succeeded on port 139 [2010/12/03 16:16:35, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:16:35, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:16:35, 2] lib/util_sock.c:938(open_socket_in) bind failed on port 445 socket_addr = 0.0.0.0. Error = Address already in use [2010/12/03 16:16:35, 0] smbd/server.c:457(smbd_open_one_socket) smbd_open_once_socket: open_socket_in: Address already in use [2010/12/03 16:16:35, 2] lib/util_sock.c:938(open_socket_in) bind failed on port 139 socket_addr = 0.0.0.0. Error = Address already in use [2010/12/03 16:16:35, 0] smbd/server.c:457(smbd_open_one_socket) smbd_open_once_socket: open_socket_in: Address already in use [2010/12/03 16:16:35, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/12/03 16:16:35, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key E3100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:16:35, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f15a0b87940 [2010/12/03 16:16:35, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key E3100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:16:35, 2] smbd/server.c:676(smbd_parent_loop) waiting for connections [2010/12/03 16:16:35, 5] printing/printing.c:1434(start_background_queue) start_background_queue: background LPQ thread started [2010/12/03 16:16:35, 5] smbd/connection.c:142(claim_connection) claiming [smbd lpq backend] [2010/12/03 16:16:35, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key E4100000FFFFFFFFFFFFFFFF736D6264206C7071206261636B656E64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:16:35, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f15a0b87940 [2010/12/03 16:16:35, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key E4100000FFFFFFFFFFFFFFFF736D6264206C7071206261636B656E64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:16:35, 5] printing/printing.c:1468(start_background_queue) start_background_queue: background LPQ thread waiting for messages [2010/12/03 16:17:00, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:17:00, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:17:00, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:00, 3] smbd/oplock.c:911(init_oplocks) init_oplocks: initializing messages. [2010/12/03 16:17:00, 3] smbd/oplock_linux.c:223(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b57170 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7f15a0b57170 [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b54310 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7f15a0b54310 [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b543e0 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7f15a0b543e0 [2010/12/03 16:17:00, 5] lib/util_sock.c:528(read_fd_with_timeout) read_fd_with_timeout: blocking read. EOF from client. [2010/12/03 16:17:00, 10] smbd/process.c:271(receive_smb_raw_talloc) receive_smb_raw: NT_STATUS_END_OF_FILE [2010/12/03 16:17:00, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:00, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:00, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:00, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:00, 3] smbd/connection.c:31(yield_connection) Yielding connection to [2010/12/03 16:17:00, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key E8100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:00, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f15a0b79950 [2010/12/03 16:17:00, 3] smbd/connection.c:42(yield_connection) deleting connection record returned NT_STATUS_NOT_FOUND [2010/12/03 16:17:00, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key E8100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:00, 3] smbd/server.c:845(exit_server_common) Server exit (failed to receive smb request) [2010/12/03 16:17:00, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:17:00, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:17:00, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:00, 3] smbd/oplock.c:911(init_oplocks) init_oplocks: initializing messages. [2010/12/03 16:17:00, 3] smbd/oplock_linux.c:223(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b57170 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7f15a0b57170 [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b54310 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7f15a0b54310 [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b543e0 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7f15a0b543e0 [2010/12/03 16:17:00, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:17:00, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:17:00, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:00, 3] smbd/oplock.c:911(init_oplocks) init_oplocks: initializing messages. [2010/12/03 16:17:00, 3] smbd/oplock_linux.c:223(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b57170 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7f15a0b57170 [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b54310 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7f15a0b54310 [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b543e0 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7f15a0b543e0 [2010/12/03 16:17:00, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:17:00, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/03 16:17:00, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:00, 3] smbd/oplock.c:911(init_oplocks) init_oplocks: initializing messages. [2010/12/03 16:17:00, 3] smbd/oplock_linux.c:223(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b57170 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7f15a0b57170 [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b54310 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7f15a0b54310 [2010/12/03 16:17:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b543e0 [2010/12/03 16:17:00, 10] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7f15a0b543e0 [2010/12/03 16:17:00, 5] lib/util_sock.c:528(read_fd_with_timeout) read_fd_with_timeout: blocking read. EOF from client. [2010/12/03 16:17:00, 10] smbd/process.c:271(receive_smb_raw_talloc) receive_smb_raw: NT_STATUS_END_OF_FILE [2010/12/03 16:17:00, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:00, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:00, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:00, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:00, 3] smbd/connection.c:31(yield_connection) Yielding connection to [2010/12/03 16:17:00, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key EB100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:00, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f15a0b79950 [2010/12/03 16:17:00, 3] smbd/connection.c:42(yield_connection) deleting connection record returned NT_STATUS_NOT_FOUND [2010/12/03 16:17:00, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key EB100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:00, 3] smbd/server.c:845(exit_server_common) Server exit (failed to receive smb request) [2010/12/03 16:17:02, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 190 [2010/12/03 16:17:02, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0xbe [2010/12/03 16:17:02, 3] smbd/process.c:1459(process_smb) Transaction 0 of length 194 (0 toread) [2010/12/03 16:17:02, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:02, 5] lib/util.c:642(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=65535 smb_pid=4320 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/12/03 16:17:02, 10] ../lib/util/util.c:304(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/12/03 16:17:02, 3] smbd/process.c:1273(switch_message) switch message SMBnegprot (pid 4329) conn 0x0 [2010/12/03 16:17:02, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBnegprot.1.req len 194 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [LANMAN1.0] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [LM1.2X002] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [LANMAN2.1] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [Samba] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [NT LM 0.12] [2010/12/03 16:17:02, 10] lib/util.c:1979(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/12/03 16:17:02, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:02, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key E9100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f15a0b8da60 [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key E9100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:02, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:02, 3] smbd/negprot.c:387(reply_nt1) using SPNEGO [2010/12/03 16:17:02, 3] smbd/negprot.c:672(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/12/03 16:17:02, 5] smbd/negprot.c:679(reply_negprot) negprot index=8 [2010/12/03 16:17:02, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:02, 5] lib/util.c:642(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=65535 smb_pid=4320 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=59648 (0xE900) smb_vwv[ 8]= 16 (0x10) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=58603 (0xE4EB) smb_vwv[13]=64802 (0xFD22) smb_vwv[14]=52114 (0xCB92) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/12/03 16:17:02, 10] ../lib/util/util.c:304(_dump_data) [0000] 6E 73 74 61 2D 64 63 00 00 00 00 00 00 00 00 00 nsta-dc. ........ [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/12/03 16:17:02, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 88 [2010/12/03 16:17:02, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x58 [2010/12/03 16:17:02, 3] smbd/process.c:1459(process_smb) Transaction 1 of length 92 (0 toread) [2010/12/03 16:17:02, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:02, 5] lib/util.c:642(show_msg) size=88 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=65535 smb_pid=4320 smb_uid=0 smb_mid=2 smt_wct=13 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 4320 (0x10E0) smb_vwv[ 5]= 4329 (0x10E9) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=53340 (0xD05C) smb_vwv[12]= 0 (0x0) smb_bcc=27 [2010/12/03 16:17:02, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0010] 00 61 00 6D 00 62 00 61 00 00 00 .a.m.b.a ... [2010/12/03 16:17:02, 3] smbd/process.c:1273(switch_message) switch message SMBsesssetupX (pid 4329) conn 0x0 [2010/12/03 16:17:02, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBsesssetupX.1.req len 92 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:02, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X) wct=13 flg2=0xc801 [2010/12/03 16:17:02, 3] smbd/sesssetup.c:1607(reply_sesssetup_and_X) Domain=[] NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/12/03 16:17:02, 3] smbd/sesssetup.c:1623(reply_sesssetup_and_X) sesssetupX:name=[]\[]@[__ffff_10.10.100.228] [2010/12/03 16:17:02, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:02, 3] smbd/sesssetup.c:151(check_guest_password) Got anonymous request [2010/12/03 16:17:02, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for DC, security=user, encrypt passwords = yes [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/12/03 16:17:02, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/12/03 16:17:02, 5] auth/auth.c:414(load_auth_module) load_auth_module: auth method guest has a valid init [2010/12/03 16:17:02, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/12/03 16:17:02, 5] auth/auth.c:414(load_auth_module) load_auth_module: auth method sam has a valid init [2010/12/03 16:17:02, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:trustdomain [2010/12/03 16:17:02, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match trustdomain [2010/12/03 16:17:02, 5] auth/auth.c:414(load_auth_module) load_auth_module: auth method trustdomain has a valid init [2010/12/03 16:17:02, 5] auth/auth.c:414(load_auth_module) load_auth_module: auth method winbind has a valid init [2010/12/03 16:17:02, 5] auth/auth_util.c:120(make_user_info) attempting to make a user_info for () [2010/12/03 16:17:02, 5] auth/auth_util.c:130(make_user_info) making strings for 's user_info struct [2010/12/03 16:17:02, 5] auth/auth_util.c:162(make_user_info) making blobs for 's user_info struct [2010/12/03 16:17:02, 10] auth/auth_util.c:180(make_user_info) made an encrypted user_info for () [2010/12/03 16:17:02, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2010/12/03 16:17:02, 3] auth/auth.c:225(check_ntlm_password) check_ntlm_password: mapped user is: []\[]@[] [2010/12/03 16:17:02, 10] auth/auth.c:234(check_ntlm_password) check_ntlm_password: auth_context challenge created by fixed [2010/12/03 16:17:02, 10] auth/auth.c:236(check_ntlm_password) challenge is: [2010/12/03 16:17:02, 5] ../lib/util/util.c:304(_dump_data) [0000] 00 00 00 00 00 00 00 00 ........ [2010/12/03 16:17:02, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65533))], scope => [2] [2010/12/03 16:17:02, 5] lib/smbldap.c:1163(smbldap_close) The connection to the LDAP server was closed [2010/12/03 16:17:02, 10] lib/smbldap.c:676(smb_ldap_setup_conn) smb_ldap_setup_connection: ldap://localhost [2010/12/03 16:17:02, 2] lib/smbldap.c:856(smbldap_open_connection) smbldap_open_connection: connection opened [2010/12/03 16:17:02, 10] lib/smbldap.c:1021(smbldap_connect_system) ldap_connect_system: Binding to ldap server ldap://localhost as "cn=Administrator,dc=site" [2010/12/03 16:17:02, 3] lib/smbldap.c:1067(smbldap_connect_system) ldap_connect_system: successful connection to the LDAP server ldap_connect_system: LDAP server does support paged results [2010/12/03 16:17:02, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbldap_idle_fn": 0x7f15a0b5f630 [2010/12/03 16:17:02, 4] lib/smbldap.c:1143(smbldap_open) The LDAP server is successfully connected [2010/12/03 16:17:02, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65533)) [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 10] lib/gencache.c:194(gencache_get) Cache entry with key = ACCT_POL/password history couldn't be found [2010/12/03 16:17:02, 10] passdb/pdb_ldap.c:3854(ldapsam_get_account_policy_from_ldap) ldapsam_get_account_policy_from_ldap [2010/12/03 16:17:02, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [sambaDomainName=NSTA,dc=site], filter => [(objectclass=*)], scope => [0] [2010/12/03 16:17:02, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:17:02, 10] lib/account_pol.c:396(cache_account_policy_set) cache_account_policy_set: updating account pol cache [2010/12/03 16:17:02, 10] lib/gencache.c:131(gencache_set) Adding cache entry with key = ACCT_POL/password history; value = 0 and timeout = Fri Dec 3 16:18:02 2010 (60 seconds ahead) [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:02, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:02, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:02, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:02, 3] auth/auth.c:271(check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2010/12/03 16:17:02, 5] auth/auth.c:310(check_ntlm_password) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2010/12/03 16:17:02, 5] auth/auth_util.c:2114(free_user_info) attempting to free (and zero) a user_info structure [2010/12/03 16:17:02, 10] auth/auth_util.c:2118(free_user_info) structure was created for [2010/12/03 16:17:02, 5] auth/auth_util.c:2114(free_user_info) attempting to free (and zero) a user_info structure [2010/12/03 16:17:02, 10] smbd/password.c:172(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/12/03 16:17:02, 10] smbd/password.c:265(register_existing_vuid) register_existing_vuid: (65534,65533) nobody nobody NSTA guest=1 [2010/12/03 16:17:02, 3] smbd/password.c:269(register_existing_vuid) register_existing_vuid: User name: nobody Real name: nobody [2010/12/03 16:17:02, 3] smbd/password.c:279(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100 [2010/12/03 16:17:02, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:02, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 78 [2010/12/03 16:17:02, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x4e [2010/12/03 16:17:02, 3] smbd/process.c:1459(process_smb) Transaction 2 of length 82 (0 toread) [2010/12/03 16:17:02, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:02, 5] lib/util.c:642(show_msg) size=78 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=65535 smb_pid=4320 smb_uid=100 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=35 [2010/12/03 16:17:02, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 5C 00 4E 00 53 00 54 00 41 00 2D 00 44 .\.\.N.S .T.A.-.D [0010] 00 43 00 5C 00 49 00 50 00 43 00 24 00 00 00 49 .C.\.I.P .C.$...I [0020] 50 43 00 PC. [2010/12/03 16:17:02, 3] smbd/process.c:1273(switch_message) switch message SMBtconX (pid 4329) conn 0x0 [2010/12/03 16:17:02, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtconX.1.req len 82 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:02, 4] smbd/reply.c:675(reply_tcon_and_X) Client requested device type [IPC] for share [IPC$] [2010/12/03 16:17:02, 5] smbd/service.c:1217(make_connection) making a connection to 'normal' service ipc$ [2010/12/03 16:17:02, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65533))], scope => [2] [2010/12/03 16:17:02, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:17:02, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65533)) [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:02, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:02, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:02, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:02, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:02, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user nobody [2010/12/03 16:17:02, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2010/12/03 16:17:02, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2010/12/03 16:17:02, 10] smbd/service.c:162(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/03 16:17:02, 3] smbd/service.c:807(make_connection_snum) Connect path is '/var/tmp' for service [IPC$] [2010/12/03 16:17:02, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/12/03 16:17:02, 3] smbd/vfs.c:95(vfs_init_default) Initialising default vfs hooks [2010/12/03 16:17:02, 10] smbd/vfs.c:47(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:85(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2010/12/03 16:17:02, 10] smbd/vfs.c:47(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2010/12/03 16:17:02, 5] smbd/vfs.c:85(smb_register_vfs) Successfully added vfs backend 'posixacl' [2010/12/03 16:17:02, 3] smbd/vfs.c:129(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2010/12/03 16:17:02, 10] smbd/vfs.c:47(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #0 (type 0, layer 0) Making operation type 0 opaque [module /[Default VFS]/] Accepting operation type 0 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #1 (type 1, layer 0) Making operation type 1 opaque [module /[Default VFS]/] Accepting operation type 1 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #2 (type 2, layer 0) Making operation type 2 opaque [module /[Default VFS]/] Accepting operation type 2 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #3 (type 3, layer 0) Making operation type 3 opaque [module /[Default VFS]/] Accepting operation type 3 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #4 (type 4, layer 0) Making operation type 4 opaque [module /[Default VFS]/] Accepting operation type 4 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #5 (type 5, layer 0) Making operation type 5 opaque [module /[Default VFS]/] Accepting operation type 5 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #6 (type 6, layer 0) Making operation type 6 opaque [module /[Default VFS]/] Accepting operation type 6 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #7 (type 7, layer 0) Making operation type 7 opaque [module /[Default VFS]/] Accepting operation type 7 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #8 (type 8, layer 0) Making operation type 8 opaque [module /[Default VFS]/] Accepting operation type 8 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #9 (type 9, layer 0) Making operation type 9 opaque [module /[Default VFS]/] Accepting operation type 9 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #10 (type 10, layer 0) Making operation type 10 opaque [module /[Default VFS]/] Accepting operation type 10 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #11 (type 11, layer 0) Making operation type 11 opaque [module /[Default VFS]/] Accepting operation type 11 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #12 (type 12, layer 0) Making operation type 12 opaque [module /[Default VFS]/] Accepting operation type 12 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #13 (type 13, layer 0) Making operation type 13 opaque [module /[Default VFS]/] Accepting operation type 13 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #14 (type 14, layer 0) Making operation type 14 opaque [module /[Default VFS]/] Accepting operation type 14 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #15 (type 15, layer 0) Making operation type 15 opaque [module /[Default VFS]/] Accepting operation type 15 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #16 (type 16, layer 0) Making operation type 16 opaque [module /[Default VFS]/] Accepting operation type 16 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #17 (type 17, layer 0) Making operation type 17 opaque [module /[Default VFS]/] Accepting operation type 17 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #18 (type 18, layer 0) Making operation type 18 opaque [module /[Default VFS]/] Accepting operation type 18 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #19 (type 19, layer 0) Making operation type 19 opaque [module /[Default VFS]/] Accepting operation type 19 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #20 (type 20, layer 0) Making operation type 20 opaque [module /[Default VFS]/] Accepting operation type 20 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #21 (type 21, layer 0) Making operation type 21 opaque [module /[Default VFS]/] Accepting operation type 21 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #22 (type 22, layer 0) Making operation type 22 opaque [module /[Default VFS]/] Accepting operation type 22 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #23 (type 23, layer 0) Making operation type 23 opaque [module /[Default VFS]/] Accepting operation type 23 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #24 (type 24, layer 0) Making operation type 24 opaque [module /[Default VFS]/] Accepting operation type 24 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #25 (type 25, layer 0) Making operation type 25 opaque [module /[Default VFS]/] Accepting operation type 25 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #26 (type 26, layer 0) Making operation type 26 opaque [module /[Default VFS]/] Accepting operation type 26 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #27 (type 27, layer 0) Making operation type 27 opaque [module /[Default VFS]/] Accepting operation type 27 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #28 (type 28, layer 0) Making operation type 28 opaque [module /[Default VFS]/] Accepting operation type 28 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #29 (type 29, layer 0) Making operation type 29 opaque [module /[Default VFS]/] Accepting operation type 29 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #30 (type 30, layer 0) Making operation type 30 opaque [module /[Default VFS]/] Accepting operation type 30 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #31 (type 31, layer 0) Making operation type 31 opaque [module /[Default VFS]/] Accepting operation type 31 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #32 (type 32, layer 0) Making operation type 32 opaque [module /[Default VFS]/] Accepting operation type 32 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #33 (type 33, layer 0) Making operation type 33 opaque [module /[Default VFS]/] Accepting operation type 33 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #34 (type 34, layer 0) Making operation type 34 opaque [module /[Default VFS]/] Accepting operation type 34 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #35 (type 35, layer 0) Making operation type 35 opaque [module /[Default VFS]/] Accepting operation type 35 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #36 (type 36, layer 0) Making operation type 36 opaque [module /[Default VFS]/] Accepting operation type 36 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #37 (type 37, layer 0) Making operation type 37 opaque [module /[Default VFS]/] Accepting operation type 37 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #38 (type 38, layer 0) Making operation type 38 opaque [module /[Default VFS]/] Accepting operation type 38 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #39 (type 39, layer 0) Making operation type 39 opaque [module /[Default VFS]/] Accepting operation type 39 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #40 (type 40, layer 0) Making operation type 40 opaque [module /[Default VFS]/] Accepting operation type 40 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #41 (type 41, layer 0) Making operation type 41 opaque [module /[Default VFS]/] Accepting operation type 41 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #42 (type 42, layer 0) Making operation type 42 opaque [module /[Default VFS]/] Accepting operation type 42 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #43 (type 43, layer 0) Making operation type 43 opaque [module /[Default VFS]/] Accepting operation type 43 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #44 (type 44, layer 0) Making operation type 44 opaque [module /[Default VFS]/] Accepting operation type 44 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #45 (type 45, layer 0) Making operation type 45 opaque [module /[Default VFS]/] Accepting operation type 45 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #46 (type 46, layer 0) Making operation type 46 opaque [module /[Default VFS]/] Accepting operation type 46 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #47 (type 47, layer 0) Making operation type 47 opaque [module /[Default VFS]/] Accepting operation type 47 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #48 (type 48, layer 0) Making operation type 48 opaque [module /[Default VFS]/] Accepting operation type 48 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #49 (type 49, layer 0) Making operation type 49 opaque [module /[Default VFS]/] Accepting operation type 49 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #50 (type 50, layer 0) Making operation type 50 opaque [module /[Default VFS]/] Accepting operation type 50 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #51 (type 51, layer 0) Making operation type 51 opaque [module /[Default VFS]/] Accepting operation type 51 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #52 (type 52, layer 0) Making operation type 52 opaque [module /[Default VFS]/] Accepting operation type 52 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #53 (type 53, layer 0) Making operation type 53 opaque [module /[Default VFS]/] Accepting operation type 53 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #54 (type 54, layer 0) Making operation type 54 opaque [module /[Default VFS]/] Accepting operation type 54 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #55 (type 55, layer 0) Making operation type 55 opaque [module /[Default VFS]/] Accepting operation type 55 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #56 (type 56, layer 0) Making operation type 56 opaque [module /[Default VFS]/] Accepting operation type 56 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #57 (type 57, layer 0) Making operation type 57 opaque [module /[Default VFS]/] Accepting operation type 57 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #58 (type 58, layer 0) Making operation type 58 opaque [module /[Default VFS]/] Accepting operation type 58 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #59 (type 59, layer 0) Making operation type 59 opaque [module /[Default VFS]/] Accepting operation type 59 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #60 (type 60, layer 0) Making operation type 60 opaque [module /[Default VFS]/] Accepting operation type 60 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #61 (type 61, layer 0) Making operation type 61 opaque [module /[Default VFS]/] Accepting operation type 61 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #62 (type 62, layer 0) Making operation type 62 opaque [module /[Default VFS]/] Accepting operation type 62 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #63 (type 63, layer 0) Making operation type 63 opaque [module /[Default VFS]/] Accepting operation type 63 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #64 (type 64, layer 0) Making operation type 64 opaque [module /[Default VFS]/] Accepting operation type 64 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #65 (type 65, layer 0) Making operation type 65 opaque [module /[Default VFS]/] Accepting operation type 65 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #66 (type 66, layer 0) Making operation type 66 opaque [module /[Default VFS]/] Accepting operation type 66 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #67 (type 67, layer 0) Making operation type 67 opaque [module /[Default VFS]/] Accepting operation type 67 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #68 (type 68, layer 0) Making operation type 68 opaque [module /[Default VFS]/] Accepting operation type 68 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #69 (type 69, layer 0) Making operation type 69 opaque [module /[Default VFS]/] Accepting operation type 69 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #70 (type 70, layer 0) Making operation type 70 opaque [module /[Default VFS]/] Accepting operation type 70 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #71 (type 71, layer 0) Making operation type 71 opaque [module /[Default VFS]/] Accepting operation type 71 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #72 (type 72, layer 0) Making operation type 72 opaque [module /[Default VFS]/] Accepting operation type 72 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #73 (type 73, layer 0) Making operation type 73 opaque [module /[Default VFS]/] Accepting operation type 73 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #74 (type 74, layer 0) Making operation type 74 opaque [module /[Default VFS]/] Accepting operation type 74 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #75 (type 75, layer 0) Making operation type 75 opaque [module /[Default VFS]/] Accepting operation type 75 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #76 (type 76, layer 0) Making operation type 76 opaque [module /[Default VFS]/] Accepting operation type 76 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #77 (type 77, layer 0) Making operation type 77 opaque [module /[Default VFS]/] Accepting operation type 77 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #78 (type 78, layer 0) Making operation type 78 opaque [module /[Default VFS]/] Accepting operation type 78 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #79 (type 79, layer 0) Making operation type 79 opaque [module /[Default VFS]/] Accepting operation type 79 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #80 (type 80, layer 0) Making operation type 80 opaque [module /[Default VFS]/] Accepting operation type 80 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #81 (type 81, layer 0) Making operation type 81 opaque [module /[Default VFS]/] Accepting operation type 81 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #82 (type 82, layer 0) Making operation type 82 opaque [module /[Default VFS]/] Accepting operation type 82 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #83 (type 83, layer 0) Making operation type 83 opaque [module /[Default VFS]/] Accepting operation type 83 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #84 (type 84, layer 0) Making operation type 84 opaque [module /[Default VFS]/] Accepting operation type 84 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #85 (type 85, layer 0) Making operation type 85 opaque [module /[Default VFS]/] Accepting operation type 85 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #86 (type 86, layer 0) Making operation type 86 opaque [module /[Default VFS]/] Accepting operation type 86 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #87 (type 87, layer 0) Making operation type 87 opaque [module /[Default VFS]/] Accepting operation type 87 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #88 (type 88, layer 0) Making operation type 88 opaque [module /[Default VFS]/] Accepting operation type 88 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #89 (type 89, layer 0) Making operation type 89 opaque [module /[Default VFS]/] Accepting operation type 89 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #90 (type 90, layer 0) Making operation type 90 opaque [module /[Default VFS]/] Accepting operation type 90 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #91 (type 91, layer 0) Making operation type 91 opaque [module /[Default VFS]/] Accepting operation type 91 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #92 (type 92, layer 0) Making operation type 92 opaque [module /[Default VFS]/] Accepting operation type 92 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #93 (type 93, layer 0) Making operation type 93 opaque [module /[Default VFS]/] Accepting operation type 93 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #94 (type 94, layer 0) Making operation type 94 opaque [module /[Default VFS]/] Accepting operation type 94 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #95 (type 95, layer 0) Making operation type 95 opaque [module /[Default VFS]/] Accepting operation type 95 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #96 (type 96, layer 0) Making operation type 96 opaque [module /[Default VFS]/] Accepting operation type 96 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #97 (type 97, layer 0) Making operation type 97 opaque [module /[Default VFS]/] Accepting operation type 97 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #98 (type 98, layer 0) Making operation type 98 opaque [module /[Default VFS]/] Accepting operation type 98 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #99 (type 99, layer 0) Making operation type 99 opaque [module /[Default VFS]/] Accepting operation type 99 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #100 (type 100, layer 0) Making operation type 100 opaque [module /[Default VFS]/] Accepting operation type 100 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #101 (type 101, layer 0) Making operation type 101 opaque [module /[Default VFS]/] Accepting operation type 101 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #102 (type 102, layer 0) Making operation type 102 opaque [module /[Default VFS]/] Accepting operation type 102 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #103 (type 103, layer 0) Making operation type 103 opaque [module /[Default VFS]/] Accepting operation type 103 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #104 (type 104, layer 0) Making operation type 104 opaque [module /[Default VFS]/] Accepting operation type 104 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #105 (type 105, layer 0) Making operation type 105 opaque [module /[Default VFS]/] Accepting operation type 105 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #106 (type 106, layer 0) Making operation type 106 opaque [module /[Default VFS]/] Accepting operation type 106 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #107 (type 107, layer 0) Making operation type 107 opaque [module /[Default VFS]/] Accepting operation type 107 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #108 (type 108, layer 0) Making operation type 108 opaque [module /[Default VFS]/] Accepting operation type 108 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #109 (type 109, layer 0) Making operation type 109 opaque [module /[Default VFS]/] Accepting operation type 109 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #110 (type 110, layer 0) Making operation type 110 opaque [module /[Default VFS]/] Accepting operation type 110 from module /[Default VFS]/ [2010/12/03 16:17:02, 5] smbd/connection.c:142(claim_connection) claiming [IPC$] [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key E9100000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f15a0b8ea90 [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key E9100000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:02, 10] smbd/service.c:162(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/03 16:17:02, 10] smbd/share_access.c:234(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2010/12/03 16:17:02, 10] smbd/share_access.c:279(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2010/12/03 16:17:02, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:02, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:02, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:02, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:02, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 5] auth/token_util.c:528(debug_nt_user_token) NT user token of user S-1-5-21-2207529392-607014842-3643267381-501 contains 7 SIDs SID[ 0]: S-1-5-21-2207529392-607014842-3643267381-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/03 16:17:02, 5] smbd/uid.c:353(change_to_user) change_to_user uid=(0,65534) gid=(0,65533) [2010/12/03 16:17:02, 10] smbd/service.c:162(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/03 16:17:02, 3] smbd/service.c:1062(make_connection_snum) __ffff_10.10.100.228 (::ffff:10.10.100.228) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 4329) [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:02, 3] smbd/reply.c:754(reply_tcon_and_X) tconX service=IPC$ [2010/12/03 16:17:02, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 190 [2010/12/03 16:17:02, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0xbe [2010/12/03 16:17:02, 3] smbd/process.c:1459(process_smb) Transaction 0 of length 194 (0 toread) [2010/12/03 16:17:02, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:02, 5] lib/util.c:642(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=65535 smb_pid=4322 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/12/03 16:17:02, 10] ../lib/util/util.c:304(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/12/03 16:17:02, 3] smbd/process.c:1273(switch_message) switch message SMBnegprot (pid 4332) conn 0x0 [2010/12/03 16:17:02, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBnegprot.2.req len 194 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [LANMAN1.0] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [LM1.2X002] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [LANMAN2.1] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [Samba] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/12/03 16:17:02, 3] smbd/negprot.c:567(reply_negprot) Requested protocol [NT LM 0.12] [2010/12/03 16:17:02, 10] lib/util.c:1979(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/12/03 16:17:02, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:02, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key EC100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f15a0b8da60 [2010/12/03 16:17:02, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key EC100000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:02, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:02, 3] smbd/negprot.c:387(reply_nt1) using SPNEGO [2010/12/03 16:17:02, 3] smbd/negprot.c:672(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/12/03 16:17:02, 5] smbd/negprot.c:679(reply_negprot) negprot index=8 [2010/12/03 16:17:02, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:02, 5] lib/util.c:642(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=65535 smb_pid=4322 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=60416 (0xEC00) smb_vwv[ 8]= 16 (0x10) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=58603 (0xE4EB) smb_vwv[13]=64802 (0xFD22) smb_vwv[14]=52114 (0xCB92) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/12/03 16:17:02, 10] ../lib/util/util.c:304(_dump_data) [0000] 6E 73 74 61 2D 64 63 00 00 00 00 00 00 00 00 00 nsta-dc. ........ [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/12/03 16:17:02, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 88 [2010/12/03 16:17:02, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x58 [2010/12/03 16:17:02, 3] smbd/process.c:1459(process_smb) Transaction 1 of length 92 (0 toread) [2010/12/03 16:17:02, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:02, 5] lib/util.c:642(show_msg) size=88 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=65535 smb_pid=4322 smb_uid=0 smb_mid=2 smt_wct=13 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 4322 (0x10E2) smb_vwv[ 5]= 4332 (0x10EC) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=53340 (0xD05C) smb_vwv[12]= 0 (0x0) smb_bcc=27 [2010/12/03 16:17:02, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0010] 00 61 00 6D 00 62 00 61 00 00 00 .a.m.b.a ... [2010/12/03 16:17:02, 3] smbd/process.c:1273(switch_message) switch message SMBsesssetupX (pid 4332) conn 0x0 [2010/12/03 16:17:02, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBsesssetupX.2.req len 92 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:02, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X) wct=13 flg2=0xc801 [2010/12/03 16:17:02, 3] smbd/sesssetup.c:1607(reply_sesssetup_and_X) Domain=[] NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/12/03 16:17:02, 3] smbd/sesssetup.c:1623(reply_sesssetup_and_X) sesssetupX:name=[]\[]@[__ffff_10.10.100.228] [2010/12/03 16:17:02, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:02, 3] smbd/sesssetup.c:151(check_guest_password) Got anonymous request [2010/12/03 16:17:02, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for DC, security=user, encrypt passwords = yes [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/12/03 16:17:02, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/12/03 16:17:02, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/12/03 16:17:02, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/12/03 16:17:02, 5] auth/auth.c:414(load_auth_module) load_auth_module: auth method guest has a valid init [2010/12/03 16:17:02, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/12/03 16:17:02, 5] auth/auth.c:414(load_auth_module) load_auth_module: auth method sam has a valid init [2010/12/03 16:17:02, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:trustdomain [2010/12/03 16:17:02, 5] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match trustdomain [2010/12/03 16:17:02, 5] auth/auth.c:414(load_auth_module) load_auth_module: auth method trustdomain has a valid init [2010/12/03 16:17:02, 5] auth/auth.c:414(load_auth_module) load_auth_module: auth method winbind has a valid init [2010/12/03 16:17:02, 5] auth/auth_util.c:120(make_user_info) attempting to make a user_info for () [2010/12/03 16:17:02, 5] auth/auth_util.c:130(make_user_info) making strings for 's user_info struct [2010/12/03 16:17:02, 5] auth/auth_util.c:162(make_user_info) making blobs for 's user_info struct [2010/12/03 16:17:02, 10] auth/auth_util.c:180(make_user_info) made an encrypted user_info for () [2010/12/03 16:17:02, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2010/12/03 16:17:02, 3] auth/auth.c:225(check_ntlm_password) check_ntlm_password: mapped user is: []\[]@[] [2010/12/03 16:17:02, 10] auth/auth.c:234(check_ntlm_password) check_ntlm_password: auth_context challenge created by fixed [2010/12/03 16:17:02, 10] auth/auth.c:236(check_ntlm_password) challenge is: [2010/12/03 16:17:02, 5] ../lib/util/util.c:304(_dump_data) [0000] 00 00 00 00 00 00 00 00 ........ [2010/12/03 16:17:02, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65533))], scope => [2] [2010/12/03 16:17:02, 5] lib/smbldap.c:1163(smbldap_close) The connection to the LDAP server was closed [2010/12/03 16:17:02, 10] lib/smbldap.c:676(smb_ldap_setup_conn) smb_ldap_setup_connection: ldap://localhost [2010/12/03 16:17:02, 2] lib/smbldap.c:856(smbldap_open_connection) smbldap_open_connection: connection opened [2010/12/03 16:17:02, 10] lib/smbldap.c:1021(smbldap_connect_system) ldap_connect_system: Binding to ldap server ldap://localhost as "cn=Administrator,dc=site" [2010/12/03 16:17:02, 3] lib/smbldap.c:1067(smbldap_connect_system) ldap_connect_system: successful connection to the LDAP server ldap_connect_system: LDAP server does support paged results [2010/12/03 16:17:02, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbldap_idle_fn": 0x7f15a0b5e680 [2010/12/03 16:17:02, 4] lib/smbldap.c:1143(smbldap_open) The LDAP server is successfully connected [2010/12/03 16:17:02, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65533)) [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:02, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:02, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:02, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:02, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:02, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:02, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:02, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:02, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:02, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:02, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:02, 3] auth/auth.c:271(check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2010/12/03 16:17:02, 5] auth/auth.c:310(check_ntlm_password) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2010/12/03 16:17:02, 5] auth/auth_util.c:2114(free_user_info) attempting to free (and zero) a user_info structure [2010/12/03 16:17:02, 10] auth/auth_util.c:2118(free_user_info) structure was created for [2010/12/03 16:17:02, 5] auth/auth_util.c:2114(free_user_info) attempting to free (and zero) a user_info structure [2010/12/03 16:17:02, 10] smbd/password.c:172(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/12/03 16:17:02, 10] smbd/password.c:265(register_existing_vuid) register_existing_vuid: (65534,65533) nobody nobody NSTA guest=1 [2010/12/03 16:17:02, 3] smbd/password.c:269(register_existing_vuid) register_existing_vuid: User name: nobody Real name: nobody [2010/12/03 16:17:02, 3] smbd/password.c:279(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100 [2010/12/03 16:17:02, 6] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Fri Dec 3 15:44:29 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Dec 3 16:15:51 2010 [2010/12/03 16:17:02, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 102 [2010/12/03 16:17:02, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x66 [2010/12/03 16:17:02, 3] smbd/process.c:1459(process_smb) Transaction 3 of length 106 (0 toread) [2010/12/03 16:17:02, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:02, 5] lib/util.c:642(show_msg) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=4 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2010/12/03 16:17:02, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 6C 00 73 00 61 00 72 00 70 00 63 00 00 .\.l.s.a .r.p.c.. [0010] 00 00 00 ... [2010/12/03 16:17:02, 3] smbd/process.c:1273(switch_message) switch message SMBntcreateX (pid 4329) conn 0x7f15a0b8ec60 [2010/12/03 16:17:02, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBntcreateX.1.req len 106 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 5] auth/token_util.c:528(debug_nt_user_token) NT user token of user S-1-5-21-2207529392-607014842-3643267381-501 contains 7 SIDs SID[ 0]: S-1-5-21-2207529392-607014842-3643267381-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/03 16:17:07, 5] smbd/uid.c:353(change_to_user) change_to_user uid=(0,65534) gid=(0,65533) [2010/12/03 16:17:07, 4] smbd/vfs.c:753(vfs_ChDir) vfs_ChDir to /var/tmp [2010/12/03 16:17:07, 10] smbd/nttrans.c:483(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x0, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lsarpc [2010/12/03 16:17:07, 4] smbd/nttrans.c:315(nt_open_pipe) nt_open_pipe: Opening pipe \lsarpc. [2010/12/03 16:17:07, 5] smbd/files.c:103(file_new) allocated file structure 6426, fnum = 10522 (1 used) [2010/12/03 16:17:07, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p) Create pipe requested \lsarpc [2010/12/03 16:17:07, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list) init_pipe_handles: created handle list for pipe \lsarpc [2010/12/03 16:17:07, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list) init_pipe_handles: pipe_handles ref count = 1 for pipe \lsarpc [2010/12/03 16:17:07, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65533))], scope => [2] [2010/12/03 16:17:07, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:17:07, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 78 [2010/12/03 16:17:07, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x4e [2010/12/03 16:17:07, 3] smbd/process.c:1459(process_smb) Transaction 2 of length 82 (0 toread) [2010/12/03 16:17:07, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:07, 5] lib/util.c:642(show_msg) size=78 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=65535 smb_pid=4322 smb_uid=100 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=35 [2010/12/03 16:17:07, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 5C 00 4E 00 53 00 54 00 41 00 2D 00 44 .\.\.N.S .T.A.-.D [0010] 00 43 00 5C 00 49 00 50 00 43 00 24 00 00 00 49 .C.\.I.P .C.$...I [0020] 50 43 00 PC. [2010/12/03 16:17:07, 3] smbd/process.c:1273(switch_message) switch message SMBtconX (pid 4332) conn 0x0 [2010/12/03 16:17:07, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtconX.2.req len 82 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:07, 4] smbd/reply.c:675(reply_tcon_and_X) Client requested device type [IPC] for share [IPC$] [2010/12/03 16:17:07, 5] smbd/service.c:1217(make_connection) making a connection to 'normal' service ipc$ [2010/12/03 16:17:07, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65533))], scope => [2] [2010/12/03 16:17:07, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:17:07, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65533)) [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:07, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:07, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:07, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:07, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:07, 4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p) Created internal pipe \lsarpc (pipes_open=0) [2010/12/03 16:17:07, 5] smbd/nttrans.c:404(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \lsarpc [2010/12/03 16:17:07, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65533)) [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:07, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:07, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:07, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:07, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:07, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user nobody [2010/12/03 16:17:07, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2010/12/03 16:17:07, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2010/12/03 16:17:07, 10] smbd/service.c:162(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/03 16:17:07, 3] smbd/service.c:807(make_connection_snum) Connect path is '/var/tmp' for service [IPC$] [2010/12/03 16:17:07, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/12/03 16:17:07, 3] smbd/vfs.c:95(vfs_init_default) Initialising default vfs hooks [2010/12/03 16:17:07, 10] smbd/vfs.c:47(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:85(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2010/12/03 16:17:07, 10] smbd/vfs.c:47(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2010/12/03 16:17:07, 5] smbd/vfs.c:85(smb_register_vfs) Successfully added vfs backend 'posixacl' [2010/12/03 16:17:07, 3] smbd/vfs.c:129(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2010/12/03 16:17:07, 10] smbd/vfs.c:47(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #0 (type 0, layer 0) Making operation type 0 opaque [module /[Default VFS]/] Accepting operation type 0 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #1 (type 1, layer 0) Making operation type 1 opaque [module /[Default VFS]/] Accepting operation type 1 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #2 (type 2, layer 0) Making operation type 2 opaque [module /[Default VFS]/] Accepting operation type 2 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #3 (type 3, layer 0) Making operation type 3 opaque [module /[Default VFS]/] Accepting operation type 3 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #4 (type 4, layer 0) Making operation type 4 opaque [module /[Default VFS]/] Accepting operation type 4 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #5 (type 5, layer 0) Making operation type 5 opaque [module /[Default VFS]/] Accepting operation type 5 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #6 (type 6, layer 0) Making operation type 6 opaque [module /[Default VFS]/] Accepting operation type 6 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #7 (type 7, layer 0) Making operation type 7 opaque [module /[Default VFS]/] Accepting operation type 7 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #8 (type 8, layer 0) Making operation type 8 opaque [module /[Default VFS]/] Accepting operation type 8 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #9 (type 9, layer 0) Making operation type 9 opaque [module /[Default VFS]/] Accepting operation type 9 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #10 (type 10, layer 0) Making operation type 10 opaque [module /[Default VFS]/] Accepting operation type 10 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #11 (type 11, layer 0) Making operation type 11 opaque [module /[Default VFS]/] Accepting operation type 11 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #12 (type 12, layer 0) Making operation type 12 opaque [module /[Default VFS]/] Accepting operation type 12 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #13 (type 13, layer 0) Making operation type 13 opaque [module /[Default VFS]/] Accepting operation type 13 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #14 (type 14, layer 0) Making operation type 14 opaque [module /[Default VFS]/] Accepting operation type 14 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #15 (type 15, layer 0) Making operation type 15 opaque [module /[Default VFS]/] Accepting operation type 15 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #16 (type 16, layer 0) Making operation type 16 opaque [module /[Default VFS]/] Accepting operation type 16 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #17 (type 17, layer 0) Making operation type 17 opaque [module /[Default VFS]/] Accepting operation type 17 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #18 (type 18, layer 0) Making operation type 18 opaque [module /[Default VFS]/] Accepting operation type 18 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #19 (type 19, layer 0) Making operation type 19 opaque [module /[Default VFS]/] Accepting operation type 19 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #20 (type 20, layer 0) Making operation type 20 opaque [module /[Default VFS]/] Accepting operation type 20 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #21 (type 21, layer 0) Making operation type 21 opaque [module /[Default VFS]/] Accepting operation type 21 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #22 (type 22, layer 0) Making operation type 22 opaque [module /[Default VFS]/] Accepting operation type 22 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #23 (type 23, layer 0) Making operation type 23 opaque [module /[Default VFS]/] Accepting operation type 23 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #24 (type 24, layer 0) Making operation type 24 opaque [module /[Default VFS]/] Accepting operation type 24 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #25 (type 25, layer 0) Making operation type 25 opaque [module /[Default VFS]/] Accepting operation type 25 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #26 (type 26, layer 0) Making operation type 26 opaque [module /[Default VFS]/] Accepting operation type 26 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #27 (type 27, layer 0) Making operation type 27 opaque [module /[Default VFS]/] Accepting operation type 27 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #28 (type 28, layer 0) Making operation type 28 opaque [module /[Default VFS]/] Accepting operation type 28 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #29 (type 29, layer 0) Making operation type 29 opaque [module /[Default VFS]/] Accepting operation type 29 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #30 (type 30, layer 0) Making operation type 30 opaque [module /[Default VFS]/] Accepting operation type 30 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #31 (type 31, layer 0) Making operation type 31 opaque [module /[Default VFS]/] Accepting operation type 31 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #32 (type 32, layer 0) Making operation type 32 opaque [module /[Default VFS]/] Accepting operation type 32 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #33 (type 33, layer 0) Making operation type 33 opaque [module /[Default VFS]/] Accepting operation type 33 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #34 (type 34, layer 0) Making operation type 34 opaque [module /[Default VFS]/] Accepting operation type 34 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #35 (type 35, layer 0) Making operation type 35 opaque [module /[Default VFS]/] Accepting operation type 35 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #36 (type 36, layer 0) Making operation type 36 opaque [module /[Default VFS]/] Accepting operation type 36 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #37 (type 37, layer 0) Making operation type 37 opaque [module /[Default VFS]/] Accepting operation type 37 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #38 (type 38, layer 0) Making operation type 38 opaque [module /[Default VFS]/] Accepting operation type 38 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #39 (type 39, layer 0) Making operation type 39 opaque [module /[Default VFS]/] Accepting operation type 39 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #40 (type 40, layer 0) Making operation type 40 opaque [module /[Default VFS]/] Accepting operation type 40 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #41 (type 41, layer 0) Making operation type 41 opaque [module /[Default VFS]/] Accepting operation type 41 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #42 (type 42, layer 0) Making operation type 42 opaque [module /[Default VFS]/] Accepting operation type 42 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #43 (type 43, layer 0) Making operation type 43 opaque [module /[Default VFS]/] Accepting operation type 43 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #44 (type 44, layer 0) Making operation type 44 opaque [module /[Default VFS]/] Accepting operation type 44 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #45 (type 45, layer 0) Making operation type 45 opaque [module /[Default VFS]/] Accepting operation type 45 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #46 (type 46, layer 0) Making operation type 46 opaque [module /[Default VFS]/] Accepting operation type 46 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #47 (type 47, layer 0) Making operation type 47 opaque [module /[Default VFS]/] Accepting operation type 47 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #48 (type 48, layer 0) Making operation type 48 opaque [module /[Default VFS]/] Accepting operation type 48 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #49 (type 49, layer 0) Making operation type 49 opaque [module /[Default VFS]/] Accepting operation type 49 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #50 (type 50, layer 0) Making operation type 50 opaque [module /[Default VFS]/] Accepting operation type 50 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #51 (type 51, layer 0) Making operation type 51 opaque [module /[Default VFS]/] Accepting operation type 51 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #52 (type 52, layer 0) Making operation type 52 opaque [module /[Default VFS]/] Accepting operation type 52 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #53 (type 53, layer 0) Making operation type 53 opaque [module /[Default VFS]/] Accepting operation type 53 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #54 (type 54, layer 0) Making operation type 54 opaque [module /[Default VFS]/] Accepting operation type 54 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #55 (type 55, layer 0) Making operation type 55 opaque [module /[Default VFS]/] Accepting operation type 55 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #56 (type 56, layer 0) Making operation type 56 opaque [module /[Default VFS]/] Accepting operation type 56 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #57 (type 57, layer 0) Making operation type 57 opaque [module /[Default VFS]/] Accepting operation type 57 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #58 (type 58, layer 0) Making operation type 58 opaque [module /[Default VFS]/] Accepting operation type 58 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #59 (type 59, layer 0) Making operation type 59 opaque [module /[Default VFS]/] Accepting operation type 59 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #60 (type 60, layer 0) Making operation type 60 opaque [module /[Default VFS]/] Accepting operation type 60 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #61 (type 61, layer 0) Making operation type 61 opaque [module /[Default VFS]/] Accepting operation type 61 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #62 (type 62, layer 0) Making operation type 62 opaque [module /[Default VFS]/] Accepting operation type 62 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #63 (type 63, layer 0) Making operation type 63 opaque [module /[Default VFS]/] Accepting operation type 63 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #64 (type 64, layer 0) Making operation type 64 opaque [module /[Default VFS]/] Accepting operation type 64 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #65 (type 65, layer 0) Making operation type 65 opaque [module /[Default VFS]/] Accepting operation type 65 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #66 (type 66, layer 0) Making operation type 66 opaque [module /[Default VFS]/] Accepting operation type 66 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #67 (type 67, layer 0) Making operation type 67 opaque [module /[Default VFS]/] Accepting operation type 67 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #68 (type 68, layer 0) Making operation type 68 opaque [module /[Default VFS]/] Accepting operation type 68 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #69 (type 69, layer 0) Making operation type 69 opaque [module /[Default VFS]/] Accepting operation type 69 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #70 (type 70, layer 0) Making operation type 70 opaque [module /[Default VFS]/] Accepting operation type 70 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #71 (type 71, layer 0) Making operation type 71 opaque [module /[Default VFS]/] Accepting operation type 71 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #72 (type 72, layer 0) Making operation type 72 opaque [module /[Default VFS]/] Accepting operation type 72 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #73 (type 73, layer 0) Making operation type 73 opaque [module /[Default VFS]/] Accepting operation type 73 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #74 (type 74, layer 0) Making operation type 74 opaque [module /[Default VFS]/] Accepting operation type 74 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #75 (type 75, layer 0) Making operation type 75 opaque [module /[Default VFS]/] Accepting operation type 75 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #76 (type 76, layer 0) Making operation type 76 opaque [module /[Default VFS]/] Accepting operation type 76 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #77 (type 77, layer 0) Making operation type 77 opaque [module /[Default VFS]/] Accepting operation type 77 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #78 (type 78, layer 0) Making operation type 78 opaque [module /[Default VFS]/] Accepting operation type 78 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #79 (type 79, layer 0) Making operation type 79 opaque [module /[Default VFS]/] Accepting operation type 79 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #80 (type 80, layer 0) Making operation type 80 opaque [module /[Default VFS]/] Accepting operation type 80 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #81 (type 81, layer 0) Making operation type 81 opaque [module /[Default VFS]/] Accepting operation type 81 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #82 (type 82, layer 0) Making operation type 82 opaque [module /[Default VFS]/] Accepting operation type 82 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #83 (type 83, layer 0) Making operation type 83 opaque [module /[Default VFS]/] Accepting operation type 83 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #84 (type 84, layer 0) Making operation type 84 opaque [module /[Default VFS]/] Accepting operation type 84 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #85 (type 85, layer 0) Making operation type 85 opaque [module /[Default VFS]/] Accepting operation type 85 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #86 (type 86, layer 0) Making operation type 86 opaque [module /[Default VFS]/] Accepting operation type 86 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #87 (type 87, layer 0) Making operation type 87 opaque [module /[Default VFS]/] Accepting operation type 87 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #88 (type 88, layer 0) Making operation type 88 opaque [module /[Default VFS]/] Accepting operation type 88 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #89 (type 89, layer 0) Making operation type 89 opaque [module /[Default VFS]/] Accepting operation type 89 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #90 (type 90, layer 0) Making operation type 90 opaque [module /[Default VFS]/] Accepting operation type 90 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #91 (type 91, layer 0) Making operation type 91 opaque [module /[Default VFS]/] Accepting operation type 91 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #92 (type 92, layer 0) Making operation type 92 opaque [module /[Default VFS]/] Accepting operation type 92 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #93 (type 93, layer 0) Making operation type 93 opaque [module /[Default VFS]/] Accepting operation type 93 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #94 (type 94, layer 0) Making operation type 94 opaque [module /[Default VFS]/] Accepting operation type 94 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #95 (type 95, layer 0) Making operation type 95 opaque [module /[Default VFS]/] Accepting operation type 95 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #96 (type 96, layer 0) Making operation type 96 opaque [module /[Default VFS]/] Accepting operation type 96 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #97 (type 97, layer 0) Making operation type 97 opaque [module /[Default VFS]/] Accepting operation type 97 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #98 (type 98, layer 0) Making operation type 98 opaque [module /[Default VFS]/] Accepting operation type 98 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #99 (type 99, layer 0) Making operation type 99 opaque [module /[Default VFS]/] Accepting operation type 99 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #100 (type 100, layer 0) Making operation type 100 opaque [module /[Default VFS]/] Accepting operation type 100 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #101 (type 101, layer 0) Making operation type 101 opaque [module /[Default VFS]/] Accepting operation type 101 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #102 (type 102, layer 0) Making operation type 102 opaque [module /[Default VFS]/] Accepting operation type 102 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #103 (type 103, layer 0) Making operation type 103 opaque [module /[Default VFS]/] Accepting operation type 103 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #104 (type 104, layer 0) Making operation type 104 opaque [module /[Default VFS]/] Accepting operation type 104 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #105 (type 105, layer 0) Making operation type 105 opaque [module /[Default VFS]/] Accepting operation type 105 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #106 (type 106, layer 0) Making operation type 106 opaque [module /[Default VFS]/] Accepting operation type 106 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #107 (type 107, layer 0) Making operation type 107 opaque [module /[Default VFS]/] Accepting operation type 107 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #108 (type 108, layer 0) Making operation type 108 opaque [module /[Default VFS]/] Accepting operation type 108 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #109 (type 109, layer 0) Making operation type 109 opaque [module /[Default VFS]/] Accepting operation type 109 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/vfs.c:192(vfs_init_custom) Checking operation #110 (type 110, layer 0) Making operation type 110 opaque [module /[Default VFS]/] Accepting operation type 110 from module /[Default VFS]/ [2010/12/03 16:17:07, 5] smbd/connection.c:142(claim_connection) claiming [IPC$] [2010/12/03 16:17:07, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key EC100000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:07, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f15a0b8ea90 [2010/12/03 16:17:07, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key EC100000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/03 16:17:07, 10] smbd/service.c:162(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/03 16:17:07, 10] smbd/share_access.c:234(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2010/12/03 16:17:07, 10] smbd/share_access.c:279(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2010/12/03 16:17:07, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:07, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:07, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:07, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:07, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 5] auth/token_util.c:528(debug_nt_user_token) NT user token of user S-1-5-21-2207529392-607014842-3643267381-501 contains 7 SIDs SID[ 0]: S-1-5-21-2207529392-607014842-3643267381-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/03 16:17:07, 5] smbd/uid.c:353(change_to_user) change_to_user uid=(0,65534) gid=(0,65533) [2010/12/03 16:17:07, 10] smbd/service.c:162(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/03 16:17:07, 3] smbd/service.c:1062(make_connection_snum) __ffff_10.10.100.228 (::ffff:10.10.100.228) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 4332) [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:17:07, 3] smbd/reply.c:754(reply_tcon_and_X) tconX service=IPC$ [2010/12/03 16:17:07, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 154 [2010/12/03 16:17:07, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x9a [2010/12/03 16:17:07, 3] smbd/process.c:1459(process_smb) Transaction 4 of length 158 (0 toread) [2010/12/03 16:17:07, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:07, 5] lib/util.c:642(show_msg) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10522 (0x291A) smb_bcc=87 [2010/12/03 16:17:07, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [0020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 6A ........ .......j [0030] 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 00 (.9..... ...O.... [0040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [0050] 10 48 60 02 00 00 00 .H`.... [2010/12/03 16:17:07, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4329) conn 0x7f15a0b8ec60 [2010/12/03 16:17:07, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 102 [2010/12/03 16:17:07, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x66 [2010/12/03 16:17:07, 3] smbd/process.c:1459(process_smb) Transaction 3 of length 106 (0 toread) [2010/12/03 16:17:07, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:07, 5] lib/util.c:642(show_msg) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=4 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2010/12/03 16:17:07, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 6C 00 73 00 61 00 72 00 70 00 63 00 00 .\.l.s.a .r.p.c.. [0010] 00 00 00 ... [2010/12/03 16:17:07, 3] smbd/process.c:1273(switch_message) switch message SMBntcreateX (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:07, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBntcreateX.2.req len 106 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 5] auth/token_util.c:528(debug_nt_user_token) NT user token of user S-1-5-21-2207529392-607014842-3643267381-501 contains 7 SIDs SID[ 0]: S-1-5-21-2207529392-607014842-3643267381-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/03 16:17:07, 5] smbd/uid.c:353(change_to_user) change_to_user uid=(0,65534) gid=(0,65533) [2010/12/03 16:17:07, 4] smbd/vfs.c:753(vfs_ChDir) vfs_ChDir to /var/tmp [2010/12/03 16:17:07, 10] smbd/nttrans.c:483(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x0, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lsarpc [2010/12/03 16:17:07, 4] smbd/nttrans.c:315(nt_open_pipe) nt_open_pipe: Opening pipe \lsarpc. [2010/12/03 16:17:07, 5] smbd/files.c:103(file_new) allocated file structure 6431, fnum = 10527 (1 used) [2010/12/03 16:17:07, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p) Create pipe requested \lsarpc [2010/12/03 16:17:07, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list) init_pipe_handles: created handle list for pipe \lsarpc [2010/12/03 16:17:07, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list) init_pipe_handles: pipe_handles ref count = 1 for pipe \lsarpc [2010/12/03 16:17:07, 5] lib/smbldap.c:1261(smbldap_search_ext) smbldap_search_ext: base => [dc=site], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65533))], scope => [2] [2010/12/03 16:17:07, 11] lib/smbldap.c:1116(smbldap_open) smbldap_open: already connected to the LDAP server [2010/12/03 16:17:07, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65533)) [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:07, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:07, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:07, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:07, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:07, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:07, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:07, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:07, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:07, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:07, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:07, 4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p) Created internal pipe \lsarpc (pipes_open=0) [2010/12/03 16:17:07, 5] smbd/nttrans.c:404(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \lsarpc [2010/12/03 16:17:07, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 154 [2010/12/03 16:17:07, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x9a [2010/12/03 16:17:07, 3] smbd/process.c:1459(process_smb) Transaction 4 of length 158 (0 toread) [2010/12/03 16:17:07, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:07, 5] lib/util.c:642(show_msg) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10527 (0x291F) smb_bcc=87 [2010/12/03 16:17:07, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [0020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 6A ........ .......j [0030] 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 00 (.9..... ...O.... [0040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [0050] 10 48 60 02 00 00 00 .H`.... [2010/12/03 16:17:07, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:07, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.2.req len 158 [2010/12/03 16:17:07, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:07, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=72 params=0 setup=2 [2010/12/03 16:17:07, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:07, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:07, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:07, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291f) [2010/12/03 16:17:07, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b84100 max_trans_reply: 4280 [2010/12/03 16:17:07, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 72 [2010/12/03 16:17:07, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 ........ H....... [0010] B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 ........ ........ [0020] 6A 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 j(.9.... ....O... [0030] 00 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........ [0040] 2B 10 48 60 02 00 00 00 +.H`.... [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 72 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2010/12/03 16:17:07, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000001 [2010/12/03 16:17:07, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 11, flags = 3 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 11 [2010/12/03 16:17:07, 5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req) api_pipe_bind_req: decode request. 1558 [2010/12/03 16:17:07, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_rb [2010/12/03 16:17:07, 6] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 00000000 0008 num_contexts: 01 000c context_id : 0000 000e num_transfer_syntaxes: 01 [2010/12/03 16:17:07, 6] rpc_parse/parse_prs.c:88(prs_debug) 00000f smb_io_rpc_iface [2010/12/03 16:17:07, 7] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_uuid uuid 0010 data : 3919286a 0014 data : b10c 0016 data : 11d0 0018 data : 9b a8 001a data : 00 c0 4f d9 2e f5 0020 version: 00000000 [2010/12/03 16:17:07, 6] rpc_parse/parse_prs.c:88(prs_debug) 000024 smb_io_rpc_iface [2010/12/03 16:17:07, 7] rpc_parse/parse_prs.c:88(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 [2010/12/03 16:17:07, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req) api_pipe_bind_req: \PIPE\dssetup -> \PIPE\dssetup [2010/12/03 16:17:07, 5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req) api_pipe_bind_req: make response. 1628 [2010/12/03 16:17:07, 3] rpc_server/srv_pipe.c:960(check_bind_req) check_bind_req for \lsarpc checking lsarpc checking winreg checking initshutdown checking dssetup [2010/12/03 16:17:07, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_ba [2010/12/03 16:17:07, 6] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 [2010/12/03 16:17:07, 6] rpc_parse/parse_prs.c:88(prs_debug) 000008 smb_io_rpc_addr_str 0008 len: 000e 000a str: \PIPE\dssetup. [2010/12/03 16:17:07, 6] rpc_parse/parse_prs.c:88(prs_debug) 000018 smb_io_rpc_results 0018 num_results: 01 001c result : 0000 001e reason : 0000 [2010/12/03 16:17:07, 6] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_rpc_iface [2010/12/03 16:17:07, 7] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_uuid uuid 0020 data : 8a885d04 0024 data : 1ceb 0026 data : 11c9 0028 data : 9f e8 002a data : 08 00 2b 10 48 60 0030 version: 00000002 [2010/12/03 16:17:07, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000001 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 56 [2010/12/03 16:17:07, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:07, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:07, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:07, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe) read_from_pipe: \lsarpc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2010/12/03 16:17:07, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b81a70 [2010/12/03 16:17:07, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b81a70 [2010/12/03 16:17:07, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..68] (align 0) [2010/12/03 16:17:07, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:07, 5] lib/util.c:642(show_msg) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2010/12/03 16:17:07, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [0010] 00 B8 10 B8 10 F0 53 00 00 0E 00 5C 50 49 50 45 ......S. ...\PIPE [0020] 5C 64 73 73 65 74 75 70 00 01 00 00 00 00 00 00 \dssetup ........ [0030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [0040] 60 02 00 00 00 `.... [2010/12/03 16:17:07, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 108 [2010/12/03 16:17:07, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x6c [2010/12/03 16:17:07, 3] smbd/process.c:1459(process_smb) Transaction 5 of length 112 (0 toread) [2010/12/03 16:17:07, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:07, 5] lib/util.c:642(show_msg) size=108 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 26 (0x1A) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 26 (0x1A) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10527 (0x291F) smb_bcc=41 [2010/12/03 16:17:07, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 1A 00 00 00 02 00 00 00 02 ........ ........ [0020] 00 00 00 00 00 00 00 01 00 ........ . [2010/12/03 16:17:07, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:07, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.3.req len 112 [2010/12/03 16:17:10, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:10, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=26 params=0 setup=2 [2010/12/03 16:17:10, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:10, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:10, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:10, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291f) [2010/12/03 16:17:10, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b84100 max_trans_reply: 4280 [2010/12/03 16:17:10, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 26 [2010/12/03 16:17:10, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 1A 00 00 00 02 00 00 00 ........ ........ [0010] 02 00 00 00 00 00 00 00 01 00 ........ .. [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 26 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 26 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 26, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 10 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 10 [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 001a 000a auth_len : 0000 000c call_id : 00000002 [2010/12/03 16:17:10, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 10 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 10, incoming data = 10 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000002 0004 context_id: 0000 0006 opnum : 0000 [2010/12/03 16:17:10, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 80 [2010/12/03 16:17:10, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:10, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x0 - created /tmp/in_\lsarpc_0.1.prs [2010/12/03 16:17:10, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: DSSETUP_DSROLEGETPRIMARYDOMAININFORMATION [2010/12/03 16:17:10, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[0].fn == 0x7f15a03b3620 [2010/12/03 16:17:10, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation in: struct dssetup_DsRoleGetPrimaryDomainInformation level : DS_ROLE_BASIC_INFORMATION (1) [2010/12/03 16:17:10, 10] rpc_server/srv_dssetup_nt.c:40(fill_dsrole_dominfo_basic) fill_dsrole_dominfo_basic: enter [2010/12/03 16:17:10, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation out: struct dssetup_DsRoleGetPrimaryDomainInformation info : * info : union dssetup_DsRoleInfo(case 1) basic: struct dssetup_DsRolePrimaryDomInfoBasic role : DS_ROLE_PRIMARY_DC (5) flags : 0x01000000 (16777216) 0: DS_ROLE_PRIMARY_DS_RUNNING 0: DS_ROLE_PRIMARY_DS_MIXED_MODE 0: DS_ROLE_UPGRADE_IN_PROGRESS 1: DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT domain : * domain : 'NSTA' dns_domain : NULL forest : NULL domain_guid : e6be7afa-0c77-4d25-974a-3fe4dc2099db result : WERR_OK [2010/12/03 16:17:07, 0] smbd/process.c:1223(smb_dump) [2010/12/03 16:17:10, 0] rpc_parse/parse_prs.c:73(prs_dump_region) created /tmp/SMBtrans.1.req len 158 [2010/12/03 16:17:10, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:10, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=72 params=0 setup=2 [2010/12/03 16:17:10, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:10, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:10, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:10, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291a) [2010/12/03 16:17:10, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b57a20 max_trans_reply: 4280 [2010/12/03 16:17:10, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 72 [2010/12/03 16:17:10, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 ........ H....... [0010] B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 ........ ........ [0020] 6A 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 j(.9.... ....O... [0030] 00 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........ [0040] 2B 10 48 60 02 00 00 00 +.H`.... [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 72 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000001 [2010/12/03 16:17:10, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 11, flags = 3 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 11 [2010/12/03 16:17:10, 5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req) api_pipe_bind_req: decode request. 1558 [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_rb [2010/12/03 16:17:10, 6] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 00000000 0008 num_contexts: 01 000c context_id : 0000 000e num_transfer_syntaxes: 01 [2010/12/03 16:17:10, 6] rpc_parse/parse_prs.c:88(prs_debug) 00000f smb_io_rpc_iface [2010/12/03 16:17:10, 7] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_uuid uuid 0010 data : 3919286a 0014 data : b10c 0016 data : 11d0 0018 data : 9b a8 001a data : 00 c0 4f d9 2e f5 0020 version: 00000000 [2010/12/03 16:17:10, 6] rpc_parse/parse_prs.c:88(prs_debug) 000024 smb_io_rpc_iface [2010/12/03 16:17:10, 7] rpc_parse/parse_prs.c:88(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 [2010/12/03 16:17:10, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req) api_pipe_bind_req: \PIPE\dssetup -> \PIPE\dssetup [2010/12/03 16:17:10, 5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req) api_pipe_bind_req: make response. 1628 [2010/12/03 16:17:10, 3] rpc_server/srv_pipe.c:960(check_bind_req) check_bind_req for \lsarpc checking lsarpc checking winreg checking initshutdown checking dssetup [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_ba [2010/12/03 16:17:10, 6] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 [2010/12/03 16:17:10, 6] rpc_parse/parse_prs.c:88(prs_debug) 000008 smb_io_rpc_addr_str 0008 len: 000e 000a str: \PIPE\dssetup. [2010/12/03 16:17:10, 6] rpc_parse/parse_prs.c:88(prs_debug) 000018 smb_io_rpc_results 0018 num_results: 01 001c result : 0000 001e reason : 0000 [2010/12/03 16:17:10, 6] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_rpc_iface [2010/12/03 16:17:10, 7] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_uuid uuid 0020 data : 8a885d04 0024 data : 1ceb 0026 data : 11c9 0028 data : 9f e8 002a data : 08 00 2b 10 48 60 0030 version: 00000002 [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000001 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 56 [2010/12/03 16:17:10, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:10, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:10, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe) read_from_pipe: \lsarpc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2010/12/03 16:17:10, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b57d30 [2010/12/03 16:17:10, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b57d30 [2010/12/03 16:17:10, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..68] (align 0) [2010/12/03 16:17:10, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:10, 5] lib/util.c:642(show_msg) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2010/12/03 16:17:10, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [0010] 00 B8 10 B8 10 F0 53 00 00 0E 00 5C 50 49 50 45 ......S. ...\PIPE [0020] 5C 64 73 73 65 74 75 70 00 01 00 00 00 00 00 00 \dssetup ........ [0030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [0040] 60 02 00 00 00 `.... [2010/12/03 16:17:10, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 108 [2010/12/03 16:17:10, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x6c [2010/12/03 16:17:10, 3] smbd/process.c:1459(process_smb) Transaction 5 of length 112 (0 toread) [2010/12/03 16:17:10, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:10, 5] lib/util.c:642(show_msg) size=108 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 26 (0x1A) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 26 (0x1A) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10522 (0x291A) smb_bcc=41 [2010/12/03 16:17:10, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 1A 00 00 00 02 00 00 00 02 ........ ........ [0020] 00 00 00 00 00 00 00 01 00 ........ . [2010/12/03 16:17:10, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4329) conn 0x7f15a0b8ec60 created /tmp/out_\lsarpc_0.1.prs [2010/12/03 16:17:10, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) api_rpcTNP: called \lsarpc successfully [2010/12/03 16:17:10, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 48 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 10 [2010/12/03 16:17:10, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cf80 [2010/12/03 16:17:10, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cf80 [2010/12/03 16:17:10, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 72. [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000002 [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000048 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:10, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b54100 [2010/12/03 16:17:10, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b54100 [2010/12/03 16:17:10, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..96] (align 0) [2010/12/03 16:17:10, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:10, 5] lib/util.c:642(show_msg) size=152 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 96 (0x60) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=97 [2010/12/03 16:17:10, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 60 00 00 00 02 00 00 ........ .`...... [0010] 00 48 00 00 00 00 00 00 00 00 00 02 00 01 00 00 .H...... ........ [0020] 00 05 00 00 00 00 00 00 01 04 00 02 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 FA 7A BE E6 77 0C 25 4D 97 4A 3F ......z. .w.%M.J? [0040] E4 DC 20 99 DB 05 00 00 00 00 00 00 00 05 00 00 .. ..... ........ [0050] 00 4E 00 53 00 54 00 41 00 00 00 00 00 00 00 00 .N.S.T.A ........ [0060] 00 . [2010/12/03 16:17:10, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 41 [2010/12/03 16:17:10, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x29 [2010/12/03 16:17:10, 3] smbd/process.c:1459(process_smb) Transaction 6 of length 45 (0 toread) [2010/12/03 16:17:10, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:10, 5] lib/util.c:642(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=7 smt_wct=3 smb_vwv[ 0]=10527 (0x291F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2010/12/03 16:17:10, 3] smbd/process.c:1273(switch_message) switch message SMBclose (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:10, 0] smbd/process.c:1223(smb_dump) [2010/12/03 16:17:10, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.4.req len 112 [2010/12/03 16:17:10, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:10, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=26 params=0 setup=2 [2010/12/03 16:17:10, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:10, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:10, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:10, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291a) [2010/12/03 16:17:10, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b57a20 max_trans_reply: 4280 [2010/12/03 16:17:10, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 26 [2010/12/03 16:17:10, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 1A 00 00 00 02 00 00 00 ........ ........ [0010] 02 00 00 00 00 00 00 00 01 00 ........ .. [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 26 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 26 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 26, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 10 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 10 [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 001a 000a auth_len : 0000 000c call_id : 00000002 [2010/12/03 16:17:10, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 10 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 10, incoming data = 10 [2010/12/03 16:17:10, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:10, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000002 0004 context_id: 0000 0006 opnum : 0000 [2010/12/03 16:17:10, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 80 [2010/12/03 16:17:10, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:10, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x0 - created /tmp/in_\lsarpc_0.2.prs [2010/12/03 16:17:10, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: DSSETUP_DSROLEGETPRIMARYDOMAININFORMATION [2010/12/03 16:17:10, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[0].fn == 0x7f15a03b3620 [2010/12/03 16:17:10, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation in: struct dssetup_DsRoleGetPrimaryDomainInformation level : DS_ROLE_BASIC_INFORMATION (1) [2010/12/03 16:17:10, 10] rpc_server/srv_dssetup_nt.c:40(fill_dsrole_dominfo_basic) fill_dsrole_dominfo_basic: enter [2010/12/03 16:17:10, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation out: struct dssetup_DsRoleGetPrimaryDomainInformation info : * info : union dssetup_DsRoleInfo(case 1) basic: struct dssetup_DsRolePrimaryDomInfoBasic role : DS_ROLE_PRIMARY_DC (5) flags : 0x01000000 (16777216) 0: DS_ROLE_PRIMARY_DS_RUNNING 0: DS_ROLE_PRIMARY_DS_MIXED_MODE 0: DS_ROLE_UPGRADE_IN_PROGRESS 1: DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT domain : * domain : 'NSTA' dns_domain : NULL forest : NULL domain_guid : e6be7afa-0c77-4d25-974a-3fe4dc2099db result : WERR_OK created /tmp/SMBclose.1.req len 45 [2010/12/03 16:17:10, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:10, 3] smbd/reply.c:4483(reply_close) close fd=-1 fnum=10527 (numopen=1) [2010/12/03 16:17:10, 6] smbd/close.c:454(set_close_write_time) close_write_time: Sun Feb 7 07:28:15 2106 [2010/12/03 16:17:10, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe) close_policy_by_pipe: deleted handle list for pipe \lsarpc [2010/12/03 16:17:10, 5] smbd/files.c:474(file_free) freed files structure 10527 (0 used) [2010/12/03 16:17:10, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:10, 5] lib/util.c:642(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=7 smt_wct=0 smb_bcc=0 [2010/12/03 16:17:10, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 102 [2010/12/03 16:17:10, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x66 [2010/12/03 16:17:10, 3] smbd/process.c:1459(process_smb) Transaction 7 of length 106 (0 toread) [2010/12/03 16:17:10, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:10, 5] lib/util.c:642(show_msg) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=8 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2010/12/03 16:17:10, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 6C 00 73 00 61 00 72 00 70 00 63 00 00 .\.l.s.a .r.p.c.. [0010] 00 00 00 ... [2010/12/03 16:17:10, 3] smbd/process.c:1273(switch_message) switch message SMBntcreateX (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:10, 0] rpc_parse/parse_prs.c:73(prs_dump_region) [2010/12/03 16:17:10, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBntcreateX.3.req len 106 [2010/12/03 16:17:13, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:13, 10] smbd/nttrans.c:483(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x0, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lsarpc [2010/12/03 16:17:13, 4] smbd/nttrans.c:315(nt_open_pipe) nt_open_pipe: Opening pipe \lsarpc. [2010/12/03 16:17:13, 5] smbd/files.c:103(file_new) allocated file structure 6432, fnum = 10528 (1 used) [2010/12/03 16:17:13, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p) Create pipe requested \lsarpc [2010/12/03 16:17:13, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list) init_pipe_handles: created handle list for pipe \lsarpc [2010/12/03 16:17:13, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list) init_pipe_handles: pipe_handles ref count = 1 for pipe \lsarpc [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:13, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:13, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:13, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:13, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:13, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:13, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:13, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:13, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:13, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:13, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:13, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:13, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:13, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:13, 4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p) Created internal pipe \lsarpc (pipes_open=0) [2010/12/03 16:17:13, 5] smbd/nttrans.c:404(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \lsarpc created /tmp/out_\lsarpc_0.2.prs [2010/12/03 16:17:13, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) api_rpcTNP: called \lsarpc successfully [2010/12/03 16:17:13, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 48 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 10 [2010/12/03 16:17:13, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cf80 [2010/12/03 16:17:13, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cf80 [2010/12/03 16:17:13, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 72. [2010/12/03 16:17:13, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000002 [2010/12/03 16:17:13, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000048 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:13, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b57d30 [2010/12/03 16:17:13, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b57d30 [2010/12/03 16:17:13, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..96] (align 0) [2010/12/03 16:17:13, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:13, 5] lib/util.c:642(show_msg) size=152 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 96 (0x60) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=97 [2010/12/03 16:17:13, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 60 00 00 00 02 00 00 ........ .`...... [0010] 00 48 00 00 00 00 00 00 00 00 00 02 00 01 00 00 .H...... ........ [0020] 00 05 00 00 00 00 00 00 01 04 00 02 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 FA 7A BE E6 77 0C 25 4D 97 4A 3F ......z. .w.%M.J? [0040] E4 DC 20 99 DB 05 00 00 00 00 00 00 00 05 00 00 .. ..... ........ [0050] 00 4E 00 53 00 54 00 41 00 00 00 00 00 00 00 00 .N.S.T.A ........ [0060] 00 . [2010/12/03 16:17:13, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 41 [2010/12/03 16:17:13, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x29 [2010/12/03 16:17:13, 3] smbd/process.c:1459(process_smb) Transaction 6 of length 45 (0 toread) [2010/12/03 16:17:13, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:13, 5] lib/util.c:642(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=7 smt_wct=3 smb_vwv[ 0]=10522 (0x291A) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2010/12/03 16:17:13, 3] smbd/process.c:1273(switch_message) switch message SMBclose (pid 4329) conn 0x7f15a0b8ec60 [2010/12/03 16:17:13, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBclose.2.req len 45 [2010/12/03 16:17:13, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:13, 3] smbd/reply.c:4483(reply_close) close fd=-1 fnum=10522 (numopen=1) [2010/12/03 16:17:13, 6] smbd/close.c:454(set_close_write_time) close_write_time: Sun Feb 7 07:28:15 2106 [2010/12/03 16:17:13, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe) close_policy_by_pipe: deleted handle list for pipe \lsarpc [2010/12/03 16:17:13, 5] smbd/files.c:474(file_free) freed files structure 10522 (0 used) [2010/12/03 16:17:13, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:13, 5] lib/util.c:642(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=7 smt_wct=0 smb_bcc=0 [2010/12/03 16:17:13, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 154 [2010/12/03 16:17:13, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x9a [2010/12/03 16:17:13, 3] smbd/process.c:1459(process_smb) Transaction 8 of length 158 (0 toread) [2010/12/03 16:17:13, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:13, 5] lib/util.c:642(show_msg) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=9 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10528 (0x2920) smb_bcc=87 [2010/12/03 16:17:13, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 0B 03 10 00 00 00 48 00 00 00 03 00 00 00 B8 .......H ........ [0020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [0030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [0040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [0050] 10 48 60 02 00 00 00 .H`.... [2010/12/03 16:17:13, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:13, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.5.req len 158 [2010/12/03 16:17:13, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:13, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=72 params=0 setup=2 [2010/12/03 16:17:13, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:13, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:13, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:13, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 2920) [2010/12/03 16:17:13, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b74de0 max_trans_reply: 4280 [2010/12/03 16:17:13, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 72 [2010/12/03 16:17:13, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 0B 03 10 00 00 00 48 00 00 00 03 00 00 00 ........ H....... [0010] B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 ........ ........ [0020] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [0030] 00 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........ [0040] 2B 10 48 60 02 00 00 00 +.H`.... [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 72 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2010/12/03 16:17:13, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000003 [2010/12/03 16:17:13, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 11, flags = 3 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 11 [2010/12/03 16:17:13, 5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req) api_pipe_bind_req: decode request. 1558 [2010/12/03 16:17:13, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_rb [2010/12/03 16:17:13, 6] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 00000000 0008 num_contexts: 01 000c context_id : 0000 000e num_transfer_syntaxes: 01 [2010/12/03 16:17:13, 6] rpc_parse/parse_prs.c:88(prs_debug) 00000f smb_io_rpc_iface [2010/12/03 16:17:13, 7] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_uuid uuid 0010 data : 12345778 0014 data : 1234 0016 data : abcd 0018 data : ef 00 001a data : 01 23 45 67 89 ab 0020 version: 00000000 [2010/12/03 16:17:13, 6] rpc_parse/parse_prs.c:88(prs_debug) 000024 smb_io_rpc_iface [2010/12/03 16:17:13, 7] rpc_parse/parse_prs.c:88(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 [2010/12/03 16:17:13, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req) api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc [2010/12/03 16:17:13, 5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req) api_pipe_bind_req: make response. 1628 [2010/12/03 16:17:13, 3] rpc_server/srv_pipe.c:960(check_bind_req) check_bind_req for \lsarpc checking lsarpc [2010/12/03 16:17:13, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_ba [2010/12/03 16:17:13, 6] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 [2010/12/03 16:17:13, 6] rpc_parse/parse_prs.c:88(prs_debug) 000008 smb_io_rpc_addr_str 0008 len: 000d 000a str: \PIPE\lsarpc. [2010/12/03 16:17:13, 6] rpc_parse/parse_prs.c:88(prs_debug) 000017 smb_io_rpc_results 0018 num_results: 01 001c result : 0000 001e reason : 0000 [2010/12/03 16:17:13, 6] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_rpc_iface [2010/12/03 16:17:13, 7] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_uuid uuid 0020 data : 8a885d04 0024 data : 1ceb 0026 data : 11c9 0028 data : 9f e8 002a data : 08 00 2b 10 48 60 0030 version: 00000002 [2010/12/03 16:17:13, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000003 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 56 [2010/12/03 16:17:13, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:13, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:13, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:13, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe) read_from_pipe: \lsarpc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2010/12/03 16:17:13, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b57d30 [2010/12/03 16:17:13, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b57d30 [2010/12/03 16:17:13, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..68] (align 0) [2010/12/03 16:17:13, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:13, 5] lib/util.c:642(show_msg) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2010/12/03 16:17:13, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... [0010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [0020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [0030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [0040] 60 02 00 00 00 `.... [2010/12/03 16:17:13, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 102 [2010/12/03 16:17:13, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x66 [2010/12/03 16:17:13, 3] smbd/process.c:1459(process_smb) Transaction 7 of length 106 (0 toread) [2010/12/03 16:17:13, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:13, 5] lib/util.c:642(show_msg) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=8 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2010/12/03 16:17:13, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 6C 00 73 00 61 00 72 00 70 00 63 00 00 .\.l.s.a .r.p.c.. [0010] 00 00 00 ... [2010/12/03 16:17:13, 3] smbd/process.c:1273(switch_message) switch message SMBntcreateX (pid 4329) conn 0x7f15a0b8ec60 [2010/12/03 16:17:13, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBntcreateX.4.req len 106 [2010/12/03 16:17:13, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:13, 10] smbd/nttrans.c:483(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x0, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lsarpc [2010/12/03 16:17:13, 4] smbd/nttrans.c:315(nt_open_pipe) nt_open_pipe: Opening pipe \lsarpc. [2010/12/03 16:17:13, 5] smbd/files.c:103(file_new) allocated file structure 6427, fnum = 10523 (1 used) [2010/12/03 16:17:13, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p) Create pipe requested \lsarpc [2010/12/03 16:17:13, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list) init_pipe_handles: created handle list for pipe \lsarpc [2010/12/03 16:17:13, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list) init_pipe_handles: pipe_handles ref count = 1 for pipe \lsarpc [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 3: DEFAULT [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 1: DEFAULT [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 4: DEFAULT [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags) element 2: DEFAULT [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:13, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:13, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:13, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:13, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:13, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:13, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173 [2010/12/03 16:17:13, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:13, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173 [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 5 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 6 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 7 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 8 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 9 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 10 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 21 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:572(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 12 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:595(pdb_set_domain) pdb_set_domain: setting domain NSTA, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 14 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 15 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:641(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 13 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:734(pdb_set_homedir) pdb_set_homedir: setting home dir \\nsta-dc\nobody\.9xprofile, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\nsta-dc\profiles\.msprofile, was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 22 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:777(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 23 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 25 -> now SET [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/03 16:17:13, 3] smbd/uid.c:428(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/03 16:17:13, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:17:13, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:17:13, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Fri Dec 3 16:18:02 2010 [2010/12/03 16:17:13, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy) ldapsam_get_account_policy: got valid value from cache [2010/12/03 16:17:13, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 33 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 18 -> now SET [2010/12/03 16:17:13, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2207529392-607014842-3643267381-501 from rid 501 [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 16 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 28 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 29 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 30 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 20 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 17 -> now SET [2010/12/03 16:17:13, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags) element 26 -> now SET [2010/12/03 16:17:13, 4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p) Created internal pipe \lsarpc (pipes_open=0) [2010/12/03 16:17:13, 5] smbd/nttrans.c:404(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \lsarpc [2010/12/03 16:17:13, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 178 [2010/12/03 16:17:13, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0xb2 [2010/12/03 16:17:13, 3] smbd/process.c:1459(process_smb) Transaction 9 of length 182 (0 toread) [2010/12/03 16:17:13, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:13, 5] lib/util.c:642(show_msg) size=178 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=10 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10528 (0x2920) smb_bcc=111 [2010/12/03 16:17:13, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 60 00 00 00 04 00 00 00 48 .......` .......H [0020] 00 00 00 00 00 2C 00 00 00 02 00 0A 00 00 00 00 .....,.. ........ [0030] 00 00 00 0A 00 00 00 5C 00 5C 00 4E 00 53 00 54 .......\ .\.N.S.T [0040] 00 41 00 2D 00 44 00 43 00 00 00 18 00 00 00 00 .A.-.D.C ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ........ ........ [0060] 00 02 00 0C 00 00 00 02 00 01 00 00 00 00 02 ........ ....... [2010/12/03 16:17:13, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:13, 0] smbd/process.c:1223(smb_dump) [2010/12/03 16:17:13, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 154 [2010/12/03 16:17:13, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x9a [2010/12/03 16:17:13, 3] smbd/process.c:1459(process_smb) Transaction 8 of length 158 (0 toread) [2010/12/03 16:17:13, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:13, 5] lib/util.c:642(show_msg) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=9 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10523 (0x291B) smb_bcc=87 [2010/12/03 16:17:13, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 0B 03 10 00 00 00 48 00 00 00 03 00 00 00 B8 .......H ........ [0020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [0030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [0040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [0050] 10 48 60 02 00 00 00 .H`.... [2010/12/03 16:17:13, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4329) conn 0x7f15a0b8ec60 created /tmp/SMBtrans.6.req len 182 [2010/12/03 16:17:17, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:17, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2010/12/03 16:17:17, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:17, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:17, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:17, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 2920) [2010/12/03 16:17:17, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b74de0 max_trans_reply: 4280 [2010/12/03 16:17:17, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 96 [2010/12/03 16:17:17, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 60 00 00 00 04 00 00 00 ........ `....... [0010] 48 00 00 00 00 00 2C 00 00 00 02 00 0A 00 00 00 H.....,. ........ [0020] 00 00 00 00 0A 00 00 00 5C 00 5C 00 4E 00 53 00 ........ \.\.N.S. [0030] 54 00 41 00 2D 00 44 00 43 00 00 00 18 00 00 00 T.A.-.D. C....... [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 04 00 02 00 0C 00 00 00 02 00 01 00 00 00 00 02 ........ ........ [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 96 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 80 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000004 [2010/12/03 16:17:17, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 80 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000048 0004 context_id: 0000 0006 opnum : 002c [2010/12/03 16:17:17, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 80 [2010/12/03 16:17:17, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:17, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x2c - created /tmp/in_\lsarpc_44.1.prs [2010/12/03 16:17:17, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: LSA_OPENPOLICY2 [2010/12/03 16:17:17, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[44].fn == 0x7f15a03a5760 [2010/12/03 16:17:17, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy2: struct lsa_OpenPolicy2 in: struct lsa_OpenPolicy2 system_name : * system_name : '\\NSTA-DC' attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES 0: LSA_POLICY_NOTIFICATION [2010/12/03 16:17:17, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0xa0000000 to 0x00020807 [2010/12/03 16:17:17, 4] rpc_server/srv_samr_nt.c:219(access_check_object) _lsa_OpenPolicy2: access GRANTED (requested: 0x00020807, granted: 0x00020807) [2010/12/03 16:17:17, 4] rpc_server/srv_lsa_hnd.c:160(create_policy_hnd) Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F9 4C FD 09 ........ .....L.. [0010] EC 10 00 00 .... [2010/12/03 16:17:17, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy2: struct lsa_OpenPolicy2 out: struct lsa_OpenPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-f94c-fd09ec100000 result : NT_STATUS_OK [2010/12/03 16:17:17, 0] rpc_parse/parse_prs.c:73(prs_dump_region) created /tmp/out_\lsarpc_44.1.prs [2010/12/03 16:17:17, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) api_rpcTNP: called \lsarpc successfully [2010/12/03 16:17:17, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 1084 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 80 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8d010 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8d010 [2010/12/03 16:17:17, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000004 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b6be10 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b6be10 [2010/12/03 16:17:17, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2010/12/03 16:17:17, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:17, 5] lib/util.c:642(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2010/12/03 16:17:17, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [0020] 00 00 00 00 00 F9 4C FD 09 EC 10 00 00 00 00 00 ......L. ........ [0030] 00 . [2010/12/03 16:17:13, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.7.req len 158 [2010/12/03 16:17:17, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:17, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=72 params=0 setup=2 [2010/12/03 16:17:17, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:17, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:17, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:17, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291b) [2010/12/03 16:17:17, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b756e0 max_trans_reply: 4280 [2010/12/03 16:17:17, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 72 [2010/12/03 16:17:17, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 0B 03 10 00 00 00 48 00 00 00 03 00 00 00 ........ H....... [0010] B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 ........ ........ [0020] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [0030] 00 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........ [0040] 2B 10 48 60 02 00 00 00 +.H`.... [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 72 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000003 [2010/12/03 16:17:17, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 11, flags = 3 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 11 [2010/12/03 16:17:17, 5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req) api_pipe_bind_req: decode request. 1558 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_rb [2010/12/03 16:17:17, 6] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 00000000 0008 num_contexts: 01 000c context_id : 0000 000e num_transfer_syntaxes: 01 [2010/12/03 16:17:17, 6] rpc_parse/parse_prs.c:88(prs_debug) 00000f smb_io_rpc_iface [2010/12/03 16:17:17, 7] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_uuid uuid 0010 data : 12345778 0014 data : 1234 0016 data : abcd 0018 data : ef 00 001a data : 01 23 45 67 89 ab 0020 version: 00000000 [2010/12/03 16:17:17, 6] rpc_parse/parse_prs.c:88(prs_debug) 000024 smb_io_rpc_iface [2010/12/03 16:17:17, 7] rpc_parse/parse_prs.c:88(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 [2010/12/03 16:17:17, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req) api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc [2010/12/03 16:17:17, 5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req) api_pipe_bind_req: make response. 1628 [2010/12/03 16:17:17, 3] rpc_server/srv_pipe.c:960(check_bind_req) check_bind_req for \lsarpc checking lsarpc [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_ba [2010/12/03 16:17:17, 6] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 [2010/12/03 16:17:17, 6] rpc_parse/parse_prs.c:88(prs_debug) 000008 smb_io_rpc_addr_str 0008 len: 000d 000a str: \PIPE\lsarpc. [2010/12/03 16:17:17, 6] rpc_parse/parse_prs.c:88(prs_debug) 000017 smb_io_rpc_results 0018 num_results: 01 001c result : 0000 001e reason : 0000 [2010/12/03 16:17:17, 6] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_rpc_iface [2010/12/03 16:17:17, 7] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_uuid uuid 0020 data : 8a885d04 0024 data : 1ceb 0026 data : 11c9 0028 data : 9f e8 002a data : 08 00 2b 10 48 60 0030 version: 00000002 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000003 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 56 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:17, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe) read_from_pipe: \lsarpc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b58120 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b58120 [2010/12/03 16:17:17, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..68] (align 0) [2010/12/03 16:17:17, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:17, 5] lib/util.c:642(show_msg) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2010/12/03 16:17:17, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... [0010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [0020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [0030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [0040] 60 02 00 00 00 `.... [2010/12/03 16:17:17, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 178 [2010/12/03 16:17:17, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0xb2 [2010/12/03 16:17:17, 3] smbd/process.c:1459(process_smb) Transaction 9 of length 182 (0 toread) [2010/12/03 16:17:17, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:17, 5] lib/util.c:642(show_msg) size=178 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=10 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10523 (0x291B) smb_bcc=111 [2010/12/03 16:17:17, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 60 00 00 00 04 00 00 00 48 .......` .......H [0020] 00 00 00 00 00 2C 00 00 00 02 00 0A 00 00 00 00 .....,.. ........ [0030] 00 00 00 0A 00 00 00 5C 00 5C 00 4E 00 53 00 54 .......\ .\.N.S.T [0040] 00 41 00 2D 00 44 00 43 00 00 00 18 00 00 00 00 .A.-.D.C ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ........ ........ [0060] 00 02 00 0C 00 00 00 02 00 01 00 00 00 00 02 ........ ....... [2010/12/03 16:17:17, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4329) conn 0x7f15a0b8ec60 [2010/12/03 16:17:17, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.8.req len 182 [2010/12/03 16:17:17, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:17, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2010/12/03 16:17:17, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:17, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:17, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:17, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291b) [2010/12/03 16:17:17, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b756e0 max_trans_reply: 4280 [2010/12/03 16:17:17, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 96 [2010/12/03 16:17:17, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 60 00 00 00 04 00 00 00 ........ `....... [0010] 48 00 00 00 00 00 2C 00 00 00 02 00 0A 00 00 00 H.....,. ........ [0020] 00 00 00 00 0A 00 00 00 5C 00 5C 00 4E 00 53 00 ........ \.\.N.S. [0030] 54 00 41 00 2D 00 44 00 43 00 00 00 18 00 00 00 T.A.-.D. C....... [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 04 00 02 00 0C 00 00 00 02 00 01 00 00 00 00 02 ........ ........ [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 96 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 80 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000004 [2010/12/03 16:17:17, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 80 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000048 0004 context_id: 0000 0006 opnum : 002c [2010/12/03 16:17:17, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 80 [2010/12/03 16:17:17, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:17, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x2c - created /tmp/in_\lsarpc_44.2.prs [2010/12/03 16:17:17, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: LSA_OPENPOLICY2 [2010/12/03 16:17:17, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[44].fn == 0x7f15a03a5760 [2010/12/03 16:17:17, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy2: struct lsa_OpenPolicy2 in: struct lsa_OpenPolicy2 system_name : * system_name : '\\NSTA-DC' attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES 0: LSA_POLICY_NOTIFICATION [2010/12/03 16:17:17, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0xa0000000 to 0x00020807 [2010/12/03 16:17:17, 4] rpc_server/srv_samr_nt.c:219(access_check_object) _lsa_OpenPolicy2: access GRANTED (requested: 0x00020807, granted: 0x00020807) [2010/12/03 16:17:17, 4] rpc_server/srv_lsa_hnd.c:160(create_policy_hnd) Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F9 4C FD 09 ........ .....L.. [0010] E9 10 00 00 .... [2010/12/03 16:17:17, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy2: struct lsa_OpenPolicy2 out: struct lsa_OpenPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-f94c-fd09e9100000 result : NT_STATUS_OK [2010/12/03 16:17:17, 0] rpc_parse/parse_prs.c:73(prs_dump_region) created /tmp/out_\lsarpc_44.2.prs [2010/12/03 16:17:17, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) api_rpcTNP: called \lsarpc successfully [2010/12/03 16:17:17, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 1084 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 80 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8d010 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8d010 [2010/12/03 16:17:17, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:17, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000004 [2010/12/03 16:17:17, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b78430 [2010/12/03 16:17:17, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b78430 [2010/12/03 16:17:17, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2010/12/03 16:17:17, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:17, 5] lib/util.c:642(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2010/12/03 16:17:17, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [0020] 00 00 00 00 00 F9 4C FD 09 E9 10 00 00 00 00 00 ......L. ........ [0030] 00 . [2010/12/03 16:17:17, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 128 [2010/12/03 16:17:17, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x80 [2010/12/03 16:17:17, 3] smbd/process.c:1459(process_smb) Transaction 10 of length 132 (0 toread) [2010/12/03 16:17:17, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:17, 5] lib/util.c:642(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=11 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10528 (0x2920) smb_bcc=61 [2010/12/03 16:17:17, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 2E 00 00 00 05 00 00 00 16 ........ ........ [0020] 00 00 00 00 00 2E 00 00 00 00 00 01 00 00 00 00 ........ ........ [0030] 00 00 00 F9 4C FD 09 EC 10 00 00 0C 00 ....L... ..... [2010/12/03 16:17:17, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:17, 0] smbd/process.c:1223(smb_dump) [2010/12/03 16:17:17, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 128 [2010/12/03 16:17:17, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x80 [2010/12/03 16:17:17, 3] smbd/process.c:1459(process_smb) Transaction 10 of length 132 (0 toread) [2010/12/03 16:17:17, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:17, 5] lib/util.c:642(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=11 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10523 (0x291B) smb_bcc=61 [2010/12/03 16:17:17, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 2E 00 00 00 05 00 00 00 16 ........ ........ [0020] 00 00 00 00 00 2E 00 00 00 00 00 01 00 00 00 00 ........ ........ [0030] 00 00 00 F9 4C FD 09 E9 10 00 00 0C 00 ....L... ..... [2010/12/03 16:17:17, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4329) conn 0x7f15a0b8ec60 created /tmp/SMBtrans.9.req len 132 [2010/12/03 16:17:20, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:20, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=46 params=0 setup=2 [2010/12/03 16:17:20, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:20, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:20, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:20, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 2920) [2010/12/03 16:17:20, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b74de0 max_trans_reply: 4280 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 46 [2010/12/03 16:17:20, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 2E 00 00 00 05 00 00 00 ........ ........ [0010] 16 00 00 00 00 00 2E 00 00 00 00 00 01 00 00 00 ........ ........ [0020] 00 00 00 00 F9 4C FD 09 EC 10 00 00 0C 00 .....L.. ...... [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 46 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 46 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 30 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 30 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002e 000a auth_len : 0000 000c call_id : 00000005 [2010/12/03 16:17:20, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 30 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 30, incoming data = 30 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000016 0004 context_id: 0000 0006 opnum : 002e [2010/12/03 16:17:20, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/12/03 16:17:20, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:20, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x2e - created /tmp/in_\lsarpc_46.1.prs [2010/12/03 16:17:20, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY2 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[46].fn == 0x7f15a03a53a0 [2010/12/03 16:17:20, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 in: struct lsa_QueryInfoPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-f94c-fd09ec100000 level : LSA_POLICY_INFO_DNS (12) [2010/12/03 16:17:20, 4] rpc_server/srv_pipe.c:2345(api_rpcTNP) api_rpcTNP: rng fault return [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000005 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2010/12/03 16:17:20, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 30 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfb0 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfb0 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe) read_from_pipe: \lsarpc: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b6be10 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b6be10 [2010/12/03 16:17:20, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2010/12/03 16:17:20, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:20, 5] lib/util.c:642(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2010/12/03 16:17:20, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 05 00 00 ....#... . ...... [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2010/12/03 16:17:17, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.10.req len 132 [2010/12/03 16:17:20, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:20, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=46 params=0 setup=2 [2010/12/03 16:17:20, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:20, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:20, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:20, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291b) [2010/12/03 16:17:20, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b756e0 max_trans_reply: 4280 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 46 [2010/12/03 16:17:20, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 2E 00 00 00 05 00 00 00 ........ ........ [0010] 16 00 00 00 00 00 2E 00 00 00 00 00 01 00 00 00 ........ ........ [0020] 00 00 00 00 F9 4C FD 09 E9 10 00 00 0C 00 .....L.. ...... [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 46 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 46 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 30 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 30 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002e 000a auth_len : 0000 000c call_id : 00000005 [2010/12/03 16:17:20, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 30 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 30, incoming data = 30 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000016 0004 context_id: 0000 0006 opnum : 002e [2010/12/03 16:17:20, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/12/03 16:17:20, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:20, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x2e - created /tmp/in_\lsarpc_46.2.prs [2010/12/03 16:17:20, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY2 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[46].fn == 0x7f15a03a53a0 [2010/12/03 16:17:20, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 in: struct lsa_QueryInfoPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-f94c-fd09e9100000 level : LSA_POLICY_INFO_DNS (12) [2010/12/03 16:17:20, 4] rpc_server/srv_pipe.c:2345(api_rpcTNP) api_rpcTNP: rng fault return [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000005 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2010/12/03 16:17:20, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 30 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfb0 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfb0 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe) read_from_pipe: \lsarpc: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b1fda0 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b1fda0 [2010/12/03 16:17:20, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2010/12/03 16:17:20, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:20, 5] lib/util.c:642(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2010/12/03 16:17:20, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 05 00 00 ....#... . ...... [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2010/12/03 16:17:20, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 150 [2010/12/03 16:17:20, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x96 [2010/12/03 16:17:20, 3] smbd/process.c:1459(process_smb) Transaction 11 of length 154 (0 toread) [2010/12/03 16:17:20, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:20, 5] lib/util.c:642(show_msg) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=12 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10523 (0x291B) smb_bcc=83 [2010/12/03 16:17:20, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 44 00 00 00 06 00 00 00 2C .......D ......., [0020] 00 00 00 00 00 06 00 00 00 02 00 5C 00 00 00 18 ........ ...\.... [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 04 00 02 00 0C 00 00 00 02 00 01 00 00 ........ ........ [0050] 00 00 02 ... [2010/12/03 16:17:20, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4329) conn 0x7f15a0b8ec60 [2010/12/03 16:17:20, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.11.req len 154 [2010/12/03 16:17:20, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:20, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=68 params=0 setup=2 [2010/12/03 16:17:20, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:20, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:20, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:20, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291b) [2010/12/03 16:17:20, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b756e0 max_trans_reply: 4280 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 68 [2010/12/03 16:17:20, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 44 00 00 00 06 00 00 00 ........ D....... [0010] 2C 00 00 00 00 00 06 00 00 00 02 00 5C 00 00 00 ,....... ....\... [0020] 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 04 00 02 00 0C 00 00 00 02 00 01 00 ........ ........ [0040] 00 00 00 02 .... [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 68 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 68 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 68, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 52 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 52 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000006 [2010/12/03 16:17:20, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 52 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 52, incoming data = 52 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000002c 0004 context_id: 0000 0006 opnum : 0006 [2010/12/03 16:17:20, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/12/03 16:17:20, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:20, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x6 - created /tmp/in_\lsarpc_6.1.prs [2010/12/03 16:17:20, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: LSA_OPENPOLICY [2010/12/03 16:17:20, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[6].fn == 0x7f15a03a9ca0 [2010/12/03 16:17:20, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy: struct lsa_OpenPolicy in: struct lsa_OpenPolicy system_name : * system_name : 0x005c (92) attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES 0: LSA_POLICY_NOTIFICATION [2010/12/03 16:17:20, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0xa0000000 to 0x00020807 [2010/12/03 16:17:20, 4] rpc_server/srv_samr_nt.c:219(access_check_object) _lsa_OpenPolicy2: access GRANTED (requested: 0x00020807, granted: 0x00020807) [2010/12/03 16:17:20, 4] rpc_server/srv_lsa_hnd.c:160(create_policy_hnd) Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F9 4C 00 0A ........ .....L.. [0010] E9 10 00 00 .... [2010/12/03 16:17:20, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy: struct lsa_OpenPolicy out: struct lsa_OpenPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-f94c-000ae9100000 result : NT_STATUS_OK [2010/12/03 16:17:20, 0] rpc_parse/parse_prs.c:73(prs_dump_region) created /tmp/out_\lsarpc_6.1.prs [2010/12/03 16:17:20, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) api_rpcTNP: called \lsarpc successfully [2010/12/03 16:17:20, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 1084 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 52 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000006 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b58200 [2010/12/03 16:17:20, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b58200 [2010/12/03 16:17:20, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2010/12/03 16:17:20, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:20, 5] lib/util.c:642(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=12 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2010/12/03 16:17:20, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 06 00 00 ........ .0...... [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 02 00 00 ........ ........ [0020] 00 00 00 00 00 F9 4C 00 0A E9 10 00 00 00 00 00 ......L. ........ [0030] 00 . [2010/12/03 16:17:20, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 150 [2010/12/03 16:17:20, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x96 [2010/12/03 16:17:20, 3] smbd/process.c:1459(process_smb) Transaction 11 of length 154 (0 toread) [2010/12/03 16:17:20, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:20, 5] lib/util.c:642(show_msg) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=12 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10528 (0x2920) smb_bcc=83 [2010/12/03 16:17:20, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 44 00 00 00 06 00 00 00 2C .......D ......., [0020] 00 00 00 00 00 06 00 00 00 02 00 5C 00 00 00 18 ........ ...\.... [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 04 00 02 00 0C 00 00 00 02 00 01 00 00 ........ ........ [0050] 00 00 02 ... [2010/12/03 16:17:20, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:20, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.12.req len 154 [2010/12/03 16:17:20, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:20, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=68 params=0 setup=2 [2010/12/03 16:17:20, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:20, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:20, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:20, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 2920) [2010/12/03 16:17:20, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b74de0 max_trans_reply: 4280 [2010/12/03 16:17:20, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 68 [2010/12/03 16:17:20, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 44 00 00 00 06 00 00 00 ........ D....... [0010] 2C 00 00 00 00 00 06 00 00 00 02 00 5C 00 00 00 ,....... ....\... [0020] 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 04 00 02 00 0C 00 00 00 02 00 01 00 ........ ........ [0040] 00 00 00 02 .... [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 68 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 68 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 68, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 52 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 52 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000006 [2010/12/03 16:17:20, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 52 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 52, incoming data = 52 [2010/12/03 16:17:20, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:20, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000002c 0004 context_id: 0000 0006 opnum : 0006 [2010/12/03 16:17:20, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/12/03 16:17:20, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:20, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x6 - created /tmp/in_\lsarpc_6.2.prs [2010/12/03 16:17:20, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: LSA_OPENPOLICY [2010/12/03 16:17:20, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[6].fn == 0x7f15a03a9ca0 [2010/12/03 16:17:20, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy: struct lsa_OpenPolicy in: struct lsa_OpenPolicy system_name : * system_name : 0x005c (92) attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES 0: LSA_POLICY_NOTIFICATION [2010/12/03 16:17:20, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0xa0000000 to 0x00020807 [2010/12/03 16:17:20, 4] rpc_server/srv_samr_nt.c:219(access_check_object) _lsa_OpenPolicy2: access GRANTED (requested: 0x00020807, granted: 0x00020807) [2010/12/03 16:17:20, 4] rpc_server/srv_lsa_hnd.c:160(create_policy_hnd) Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F9 4C 00 0A ........ .....L.. [0010] EC 10 00 00 .... [2010/12/03 16:17:20, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy: struct lsa_OpenPolicy out: struct lsa_OpenPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-f94c-000aec100000 result : NT_STATUS_OK [2010/12/03 16:17:20, 0] rpc_parse/parse_prs.c:73(prs_dump_region) [2010/12/03 16:17:20, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 128 [2010/12/03 16:17:20, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x80 [2010/12/03 16:17:20, 3] smbd/process.c:1459(process_smb) Transaction 12 of length 132 (0 toread) [2010/12/03 16:17:20, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:20, 5] lib/util.c:642(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=13 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10523 (0x291B) smb_bcc=61 [2010/12/03 16:17:20, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 2E 00 00 00 07 00 00 00 16 ........ ........ [0020] 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 00 ........ ........ [0030] 00 00 00 F9 4C 00 0A E9 10 00 00 05 00 ....L... ..... [2010/12/03 16:17:20, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4329) conn 0x7f15a0b8ec60 created /tmp/out_\lsarpc_6.2.prs [2010/12/03 16:17:23, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) api_rpcTNP: called \lsarpc successfully [2010/12/03 16:17:23, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 1084 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 52 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfe0 [2010/12/03 16:17:23, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000006 [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b84150 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b84150 [2010/12/03 16:17:23, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2010/12/03 16:17:23, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:23, 5] lib/util.c:642(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=12 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2010/12/03 16:17:23, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 06 00 00 ........ .0...... [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 02 00 00 ........ ........ [0020] 00 00 00 00 00 F9 4C 00 0A EC 10 00 00 00 00 00 ......L. ........ [0030] 00 . [2010/12/03 16:17:20, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.13.req len 132 [2010/12/03 16:17:23, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:23, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=46 params=0 setup=2 [2010/12/03 16:17:23, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:23, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:23, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:23, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 291b) [2010/12/03 16:17:23, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b756e0 max_trans_reply: 4280 [2010/12/03 16:17:23, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 46 [2010/12/03 16:17:23, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 2E 00 00 00 07 00 00 00 ........ ........ [0010] 16 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 ........ ........ [0020] 00 00 00 00 F9 4C 00 0A E9 10 00 00 05 00 .....L.. ...... [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 46 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 46 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 30 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 30 [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002e 000a auth_len : 0000 000c call_id : 00000007 [2010/12/03 16:17:23, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 30 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 30, incoming data = 30 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000016 0004 context_id: 0000 0006 opnum : 0007 [2010/12/03 16:17:23, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/12/03 16:17:23, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:23, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x7 - created /tmp/in_\lsarpc_7.1.prs [2010/12/03 16:17:23, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY [2010/12/03 16:17:23, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[7].fn == 0x7f15a03a9ac0 [2010/12/03 16:17:23, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_QueryInfoPolicy: struct lsa_QueryInfoPolicy in: struct lsa_QueryInfoPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-f94c-000ae9100000 level : LSA_POLICY_INFO_ACCOUNT_DOMAIN (5) [2010/12/03 16:17:23, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F9 4C 00 0A ........ .....L.. [0010] E9 10 00 00 .... [2010/12/03 16:17:23, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_QueryInfoPolicy: struct lsa_QueryInfoPolicy out: struct lsa_QueryInfoPolicy info : * info : * info : union lsa_PolicyInformation(case 5) account_domain: struct lsa_DomainInfo name: struct lsa_StringLarge length : 0x0000 (0) size : 0x0000 (0) string : * string : 'NSTA' sid : * sid : S-1-5-21-2207529392-607014842-3643267381 result : NT_STATUS_OK [2010/12/03 16:17:23, 0] rpc_parse/parse_prs.c:73(prs_dump_region) created /tmp/out_\lsarpc_7.1.prs [2010/12/03 16:17:23, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) api_rpcTNP: called \lsarpc successfully [2010/12/03 16:17:23, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 72 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 30 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfb0 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfb0 [2010/12/03 16:17:23, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 72. [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000007 [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000048 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b7bba0 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b7bba0 [2010/12/03 16:17:23, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..96] (align 0) [2010/12/03 16:17:23, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:23, 5] lib/util.c:642(show_msg) size=152 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=13 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 96 (0x60) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=97 [2010/12/03 16:17:23, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 60 00 00 00 07 00 00 ........ .`...... [0010] 00 48 00 00 00 00 00 00 00 00 00 02 00 05 00 00 .H...... ........ [0020] 00 08 00 0A 00 04 00 02 00 08 00 02 00 05 00 00 ........ ........ [0030] 00 00 00 00 00 04 00 00 00 4E 00 53 00 54 00 41 ........ .N.S.T.A [0040] 00 04 00 00 00 01 04 00 00 00 00 00 05 15 00 00 ........ ........ [0050] 00 B0 39 94 83 BA 4F 2E 24 35 D9 27 D9 00 00 00 ..9...O. $5.'.... [0060] 00 . [2010/12/03 16:17:23, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 128 [2010/12/03 16:17:23, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x80 [2010/12/03 16:17:23, 3] smbd/process.c:1459(process_smb) Transaction 12 of length 132 (0 toread) [2010/12/03 16:17:23, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:23, 5] lib/util.c:642(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=13 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=10528 (0x2920) smb_bcc=61 [2010/12/03 16:17:23, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 2E 00 00 00 07 00 00 00 16 ........ ........ [0020] 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 00 ........ ........ [0030] 00 00 00 F9 4C 00 0A EC 10 00 00 05 00 ....L... ..... [2010/12/03 16:17:23, 3] smbd/process.c:1273(switch_message) switch message SMBtrans (pid 4332) conn 0x7f15a0b8ec60 [2010/12/03 16:17:23, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBtrans.14.req len 132 [2010/12/03 16:17:23, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:23, 3] smbd/ipc.c:536(handle_trans) trans <\PIPE\> data=46 params=0 setup=2 [2010/12/03 16:17:23, 5] smbd/ipc.c:569(handle_trans) calling named_pipe [2010/12/03 16:17:23, 3] smbd/ipc.c:487(named_pipe) named pipe command on <> name [2010/12/03 16:17:23, 5] smbd/ipc.c:410(api_fd_reply) api_fd_reply [2010/12/03 16:17:23, 3] smbd/ipc.c:451(api_fd_reply) Got API command 0x26 on pipe "lsarpc" (pnum 2920) [2010/12/03 16:17:23, 10] smbd/ipc.c:453(api_fd_reply) api_fd_reply: p:0x7f15a0b74de0 max_trans_reply: 4280 [2010/12/03 16:17:23, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send) np_write_send: len: 46 [2010/12/03 16:17:23, 50] ../lib/util/util.c:304(_dump_data) [0000] 05 00 00 03 10 00 00 00 2E 00 00 00 07 00 00 00 ........ ........ [0010] 16 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 ........ ........ [0020] 00 00 00 00 F9 4C 00 0A EC 10 00 00 05 00 .....L.. ...... [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 46 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 46 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header) fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 30 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 30 [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002e 000a auth_len : 0000 000c call_id : 00000007 [2010/12/03 16:17:23, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe) write_to_pipe: data_left = 30 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 30, incoming data = 30 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000016 0004 context_id: 0000 0006 opnum : 0007 [2010/12/03 16:17:23, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/12/03 16:17:23, 5] rpc_server/srv_pipe.c:2261(api_pipe_request) Requested \PIPE\\lsarpc [2010/12/03 16:17:23, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP) api_rpcTNP: \lsarpc op 0x7 - created /tmp/in_\lsarpc_7.2.prs [2010/12/03 16:17:23, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP) api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY [2010/12/03 16:17:23, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP) api_rpc_cmds[7].fn == 0x7f15a03a9ac0 [2010/12/03 16:17:23, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_QueryInfoPolicy: struct lsa_QueryInfoPolicy in: struct lsa_QueryInfoPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-f94c-000aec100000 level : LSA_POLICY_INFO_ACCOUNT_DOMAIN (5) [2010/12/03 16:17:23, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F9 4C 00 0A ........ .....L.. [0010] EC 10 00 00 .... [2010/12/03 16:17:23, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_QueryInfoPolicy: struct lsa_QueryInfoPolicy out: struct lsa_QueryInfoPolicy info : * info : * info : union lsa_PolicyInformation(case 5) account_domain: struct lsa_DomainInfo name: struct lsa_StringLarge length : 0x0000 (0) size : 0x0000 (0) string : * string : 'NSTA' sid : * sid : S-1-5-21-2207529392-607014842-3643267381 result : NT_STATUS_OK [2010/12/03 16:17:23, 0] rpc_parse/parse_prs.c:73(prs_dump_region) created /tmp/out_\lsarpc_7.2.prs [2010/12/03 16:17:23, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) api_rpcTNP: called \lsarpc successfully [2010/12/03 16:17:23, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context) free_pipe_context: destroying talloc pool of size 72 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) write_to_pipe: data_used = 30 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b8cfb0 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b8cfb0 [2010/12/03 16:17:23, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) name: \lsarpc len: 4280 [2010/12/03 16:17:23, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 72. [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000007 [2010/12/03 16:17:23, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000048 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7f15a0b53c80 [2010/12/03 16:17:23, 10] lib/events.c:287(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7f15a0b53c80 [2010/12/03 16:17:23, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..96] (align 0) [2010/12/03 16:17:23, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:23, 5] lib/util.c:642(show_msg) size=152 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=13 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 96 (0x60) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=97 [2010/12/03 16:17:23, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 60 00 00 00 07 00 00 ........ .`...... [0010] 00 48 00 00 00 00 00 00 00 00 00 02 00 05 00 00 .H...... ........ [0020] 00 08 00 0A 00 04 00 02 00 08 00 02 00 05 00 00 ........ ........ [0030] 00 00 00 00 00 04 00 00 00 4E 00 53 00 54 00 41 ........ .N.S.T.A [0040] 00 04 00 00 00 01 04 00 00 00 00 00 05 15 00 00 ........ ........ [0050] 00 B0 39 94 83 BA 4F 2E 24 35 D9 27 D9 00 00 00 ..9...O. $5.'.... [0060] 00 . [2010/12/03 16:17:23, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 41 [2010/12/03 16:17:23, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x29 [2010/12/03 16:17:23, 3] smbd/process.c:1459(process_smb) Transaction 13 of length 45 (0 toread) [2010/12/03 16:17:23, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:23, 5] lib/util.c:642(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=14 smt_wct=3 smb_vwv[ 0]=10523 (0x291B) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2010/12/03 16:17:23, 3] smbd/process.c:1273(switch_message) switch message SMBclose (pid 4329) conn 0x7f15a0b8ec60 [2010/12/03 16:17:23, 0] smbd/process.c:1223(smb_dump) [2010/12/03 16:17:23, 10] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 41 [2010/12/03 16:17:23, 6] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x29 [2010/12/03 16:17:23, 3] smbd/process.c:1459(process_smb) Transaction 13 of length 45 (0 toread) [2010/12/03 16:17:23, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:23, 5] lib/util.c:642(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=14 smt_wct=3 smb_vwv[ 0]=10528 (0x2920) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2010/12/03 16:17:23, 3] smbd/process.c:1273(switch_message) switch message SMBclose (pid 4332) conn 0x7f15a0b8ec60 created /tmp/SMBclose.3.req len 45 [2010/12/03 16:17:26, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:26, 3] smbd/reply.c:4483(reply_close) close fd=-1 fnum=10523 (numopen=1) [2010/12/03 16:17:26, 6] smbd/close.c:454(set_close_write_time) close_write_time: Sun Feb 7 07:28:15 2106 [2010/12/03 16:17:26, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F9 4C 00 0A ........ .....L.. [0010] E9 10 00 00 .... [2010/12/03 16:17:26, 3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd) Closed policy [2010/12/03 16:17:26, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F9 4C FD 09 ........ .....L.. [0010] E9 10 00 00 .... [2010/12/03 16:17:26, 3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd) Closed policy [2010/12/03 16:17:26, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe) close_policy_by_pipe: deleted handle list for pipe \lsarpc [2010/12/03 16:17:26, 5] smbd/files.c:474(file_free) freed files structure 10523 (0 used) [2010/12/03 16:17:26, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:26, 5] lib/util.c:642(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4320 smb_uid=100 smb_mid=14 smt_wct=0 smb_bcc=0 [2010/12/03 16:17:23, 0] smbd/process.c:1223(smb_dump) created /tmp/SMBclose.4.req len 45 [2010/12/03 16:17:26, 4] smbd/uid.c:256(change_to_user) change_to_user: Skipping user change - already user [2010/12/03 16:17:26, 3] smbd/reply.c:4483(reply_close) close fd=-1 fnum=10528 (numopen=1) [2010/12/03 16:17:26, 6] smbd/close.c:454(set_close_write_time) close_write_time: Sun Feb 7 07:28:15 2106 [2010/12/03 16:17:26, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F9 4C 00 0A ........ .....L.. [0010] EC 10 00 00 .... [2010/12/03 16:17:26, 3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd) Closed policy [2010/12/03 16:17:26, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F9 4C FD 09 ........ .....L.. [0010] EC 10 00 00 .... [2010/12/03 16:17:26, 3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd) Closed policy [2010/12/03 16:17:26, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe) close_policy_by_pipe: deleted handle list for pipe \lsarpc [2010/12/03 16:17:26, 5] smbd/files.c:474(file_free) freed files structure 10528 (0 used) [2010/12/03 16:17:26, 5] lib/util.c:632(show_msg) [2010/12/03 16:17:26, 5] lib/util.c:642(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=4322 smb_uid=100 smb_mid=14 smt_wct=0 smb_bcc=0 [2010/12/03 16:18:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b54310 [2010/12/03 16:18:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b54310 "smbd_idle_event_handler" [2010/12/03 16:18:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2010/12/03 16:18:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2010/12/03 16:18:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b7a870 [2010/12/03 16:18:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b543e0 [2010/12/03 16:18:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b543e0 "smbd_idle_event_handler" [2010/12/03 16:18:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2010/12/03 16:18:00, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:18:00, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:18:00, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:18:00, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:18:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2010/12/03 16:18:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b53c80 [2010/12/03 16:18:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b54310 [2010/12/03 16:18:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b54310 "smbd_idle_event_handler" [2010/12/03 16:18:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2010/12/03 16:18:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2010/12/03 16:18:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b841e0 [2010/12/03 16:18:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b543e0 [2010/12/03 16:18:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b543e0 "smbd_idle_event_handler" [2010/12/03 16:18:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2010/12/03 16:18:00, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:18:00, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:18:00, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:18:00, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:18:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2010/12/03 16:18:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b53e20 [2010/12/03 16:19:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b7a870 [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b7a870 "smbd_idle_event_handler" [2010/12/03 16:19:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2010/12/03 16:19:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b83070 [2010/12/03 16:19:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b53c80 [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b53c80 "smbd_idle_event_handler" [2010/12/03 16:19:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2010/12/03 16:19:00, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:19:00, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:19:00, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:19:00, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:19:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b6b370 [2010/12/03 16:19:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b841e0 [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b841e0 "smbd_idle_event_handler" [2010/12/03 16:19:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2010/12/03 16:19:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b58200 [2010/12/03 16:19:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b53e20 [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b53e20 "smbd_idle_event_handler" [2010/12/03 16:19:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2010/12/03 16:19:00, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:19:00, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:19:00, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:19:00, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:19:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b6b0a0 [2010/12/03 16:19:00, 10] lib/events.c:105(run_events) Running timed event "smbldap_idle_fn" 0x7f15a0b53ba0 [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b53ba0 "smbldap_idle_fn" [2010/12/03 16:19:00, 10] lib/smbldap.c:1646(smbldap_idle_fn) ldap connection not idle... [2010/12/03 16:19:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbldap_idle_fn": 0x7f15a0b76170 [2010/12/03 16:19:32, 10] lib/events.c:105(run_events) Running timed event "smbldap_idle_fn" 0x7f15a0b5f630 [2010/12/03 16:19:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b5f630 "smbldap_idle_fn" [2010/12/03 16:19:32, 10] lib/smbldap.c:1646(smbldap_idle_fn) ldap connection not idle... [2010/12/03 16:19:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbldap_idle_fn": 0x7f15a0b5f630 [2010/12/03 16:19:32, 10] lib/events.c:105(run_events) Running timed event "smbldap_idle_fn" 0x7f15a0b5e680 [2010/12/03 16:19:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b5e680 "smbldap_idle_fn" [2010/12/03 16:19:32, 10] lib/smbldap.c:1646(smbldap_idle_fn) ldap connection not idle... [2010/12/03 16:19:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbldap_idle_fn": 0x7f15a0b54310 [2010/12/03 16:20:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b83070 [2010/12/03 16:20:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b83070 "smbd_idle_event_handler" [2010/12/03 16:20:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2010/12/03 16:20:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2010/12/03 16:20:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b83070 [2010/12/03 16:20:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b6b370 [2010/12/03 16:20:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b6b370 "smbd_idle_event_handler" [2010/12/03 16:20:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2010/12/03 16:20:00, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:20:00, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:20:00, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:20:00, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:20:00, 3] smbd/process.c:1856(check_reload) Printcap cache time expired. [2010/12/03 16:20:00, 3] printing/pcap.c:136(pcap_cache_reload) reloading printcap cache [2010/12/03 16:20:00, 5] printing/print_cups.c:403(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2010/12/03 16:20:00, 10] printing/print_cups.c:420(cups_pcap_load_async) cups_pcap_load_async: child pid = 4339 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:20:00, 10] printing/print_cups.c:586(cups_cache_reload) cups_cache_reload: async read on fd 28 [2010/12/03 16:20:00, 3] printing/pcap.c:243(pcap_cache_reload) reload status: ok [2010/12/03 16:20:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2010/12/03 16:20:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b7c120 [2010/12/03 16:20:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b58200 [2010/12/03 16:20:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b58200 "smbd_idle_event_handler" [2010/12/03 16:20:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2010/12/03 16:20:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2010/12/03 16:20:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b7bba0 [2010/12/03 16:20:00, 10] lib/events.c:105(run_events) Running timed event "smbd_idle_event_handler" 0x7f15a0b6b0a0 [2010/12/03 16:20:00, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0x7f15a0b6b0a0 "smbd_idle_event_handler" [2010/12/03 16:20:00, 10] smbd/process.c:663(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2010/12/03 16:20:00, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/03 16:20:00, 5] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/12/03 16:20:00, 5] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/03 16:20:00, 5] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/03 16:20:00, 3] smbd/process.c:1856(check_reload) Printcap cache time expired. [2010/12/03 16:20:00, 3] printing/pcap.c:136(pcap_cache_reload) reloading printcap cache [2010/12/03 16:20:00, 5] printing/print_cups.c:403(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2010/12/03 16:20:00, 10] printing/print_cups.c:420(cups_pcap_load_async) cups_pcap_load_async: child pid = 4340 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:20:00, 10] printing/print_cups.c:586(cups_cache_reload) cups_cache_reload: async read on fd 28 [2010/12/03 16:20:00, 3] printing/pcap.c:243(pcap_cache_reload) reload status: ok [2010/12/03 16:20:00, 10] smbd/process.c:674(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2010/12/03 16:20:00, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7f15a0b831a0 [2010/12/03 16:20:00, 5] printing/print_cups.c:164(cups_cache_reload_async) reloading cups printcap cache [2010/12/03 16:20:00, 5] printing/print_cups.c:164(cups_cache_reload_async) reloading cups printcap cache [2010/12/03 16:20:00, 10] printing/print_cups.c:87(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2010/12/03 16:20:00, 10] printing/print_cups.c:87(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 9 [2010/12/03 16:20:00, 5] printing/print_cups.c:453(cups_async_callback) cups_async_callback: callback received for printer data. fd = 28 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name zz_null_ [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name zz_null_ [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 9 [2010/12/03 16:20:00, 5] printing/print_cups.c:453(cups_async_callback) cups_async_callback: callback received for printer data. fd = 28 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 12 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 12 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 40 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 40 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name wwilde_test [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name wwilde_test [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name zz_null_ [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name zz_null_ [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 12 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 12 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 40 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 40 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name wwilde_test [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name wwilde_test [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name Virtual_PDF_Printer [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name Virtual_PDF_Printer [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 7 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 7 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 20 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 35 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 35 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name Virtual_PDF_Printer [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name Virtual_PDF_Printer [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name sw_K_6 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name sw_K_6 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 7 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 7 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 8 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 8 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 35 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 35 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name sw_K_6 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name sw_K_6 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 8 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 8 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name sw_3_15 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name sw_3_15 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name sw_3_15 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name sw_3_15 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 50 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 50 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name kyocera_msrex [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name kyocera_msrex [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 50 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 50 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name kyocera_msrex [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name kyocera_msrex [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 16 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 16 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 83 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 83 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 16 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 16 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name hp@e241.suse.de [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name hp@e241.suse.de [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 83 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 83 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name hp@e241.suse.de [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name hp@e241.suse.de [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 3 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 3 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 83 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 83 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 3 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 3 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name hp [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name hp [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 83 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 83 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name hp [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name hp [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 8 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 8 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 8 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 8 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name empfang [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name empfang [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name empfang [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name empfang [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 9 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name CUPS-PDF [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name CUPS-PDF [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name CUPS-PDF [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name CUPS-PDF [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info CUPS-PDF [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info CUPS-PDF [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info CUPS-PDF [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info CUPS-PDF [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 12 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 12 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 12 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 12 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 26 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 26 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 26 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 26 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_empfang [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_empfang [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_empfang [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_empfang [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 39 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 39 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 39 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 39 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_2_34 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_2_34 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_2_34 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_2_34 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 37 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 37 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_2_28 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_2_28 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 37 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 37 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_2_28 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_2_28 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 35 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 35 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 35 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 35 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_3_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_3_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_2_2_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_2_2_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 39 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 39 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_2_2_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_2_2_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_2_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_2_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 39 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 39 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 40 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 40 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_2_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_2_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_1_1_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_1_1_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 41 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 41 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 14 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 41 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 41 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 40 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 40 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_34_hp [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_34_hp [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name col_1_1_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name col_1_1_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 41 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 41 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_32 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_32 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 41 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 41 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_34_hp [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_34_hp [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_31 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_31 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_32 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_32 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_03 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_03 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_1_02 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_1_02 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_31 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_31 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_3_01 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_3_01 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_2_03 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_2_03 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_21 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_21 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_3_1_02 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_3_1_02 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_12 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_12 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_3_01 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_3_01 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_10 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_10 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_21 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_21 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_12 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_12 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_2_10 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_2_10 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 33 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 33 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 33 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 33 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_37 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_33 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_33 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 45 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_33 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_33 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 10 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_06 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_06 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 38 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_2_1_06 [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_2_1_06 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 13 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 36 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_1_1_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_1_1_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name bw_1_1_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name bw_1_1_floor [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 7 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 7 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 18 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 18 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name _null_ [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name _null_ [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info _null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:115(send_pcap_info) send_pcap_info: writing namelen 7 [2010/12/03 16:20:00, 11] printing/print_cups.c:472(cups_async_callback) cups_async_callback: read namelen 7 [2010/12/03 16:20:00, 11] printing/print_cups.c:121(send_pcap_info) send_pcap_info: writing infolen 18 [2010/12/03 16:20:00, 11] printing/print_cups.c:486(cups_async_callback) cups_async_callback: read infolen 18 [2010/12/03 16:20:00, 11] printing/print_cups.c:128(send_pcap_info) send_pcap_info: writing name _null_ [2010/12/03 16:20:00, 11] printing/print_cups.c:504(cups_async_callback) cups_async_callback: read name _null_ [2010/12/03 16:20:00, 11] printing/print_cups.c:136(send_pcap_info) send_pcap_info: writing info _null_ Postscript [2010/12/03 16:20:00, 11] printing/print_cups.c:524(cups_async_callback) cups_async_callback: read info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name _null_ info _null_ Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_1_1_floor info bw_1_1_floor Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_06 info bw_2_1_06 HP LaserJet 4100 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_33 info bw_2_1_33 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_1_37 info bw_2_1_37 Canon cel ir3225 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_10 info bw_2_2_10 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_12 info bw_2_2_12 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_2_21 info bw_2_2_21 HP LaserJet 1200 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_2_3_01 info bw_2_3_01 HP LaserJet 2100 Series Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_1_02 info bw_3_1_02 HP LaserJet 4000 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_03 info bw_3_2_03 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_31 info bw_3_2_31 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_32 info bw_3_2_32 HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_34_hp info bw_3_2_34_hp HP LaserJet 4300 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name bw_3_2_floor info bw_3_2_floor HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_1_1_floor info col_1_1_floor HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_1_37 info col_2_1_37 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_2_2_floor info col_2_2_floor Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_1_37 info col_3_1_37 Canon cel irc2380 ps en [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_28 info col_3_2_28 HP HP Color LaserJet 2605 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_3_2_34 info col_3_2_34 HP LaserJet 5500 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name col_empfang info col_empfang Xerox xrx7242 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name CUPS-PDF info CUPS-PDF [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name empfang info empfang HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name hp@e241.suse.de info HP LaserJet 4050 with driver HP LaserJet 4050 series Foomatic/hpijs, hpijs 2.8.7.3 [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name kyocera_msrex info kyocera_msrex Kyocera Mita Kyocera FS C5100DN.PPD [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_3_15 info sw_3_15 HP LaserJet 4350 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name sw_K_6 info sw_K_6 HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name Virtual_PDF_Printer info Virtual PDF Printer [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name wwilde_test info wwilde_test HP LaserJet 4050 Postscript [2010/12/03 16:20:00, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name zz_null_ info zz_null_ Postscript