[2010/12/05 19:55:01, 0] smbd/server.c:1119(main) smbd version 3.5.6-12.1-2470-SUSE-SL11.3-x86_64 started. Copyright Andrew Tridgell and the Samba Team 1992-2010 [2010/12/05 19:55:01.259516, 5] lib/debug.c:405(debug_dump_status) INFO: Current debug levels: all: True/99 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter include = registry [2010/12/05 19:55:01.259836, 4] param/loadparm.c:9193(lp_load_ex) pm_process() returned Yes [2010/12/05 19:55:01.259874, 7] param/loadparm.c:9399(lp_servicenumber) lp_servicenumber: couldn't find homes [2010/12/05 19:55:01.259916, 10] param/loadparm.c:8403(set_server_role) set_server_role: role = ROLE_STANDALONE [2010/12/05 19:55:01.259962, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS-2LE [2010/12/05 19:55:01.259999, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS-2LE [2010/12/05 19:55:01.260031, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-16LE [2010/12/05 19:55:01.260072, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-16LE [2010/12/05 19:55:01.260104, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS-2BE [2010/12/05 19:55:01.260135, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS-2BE [2010/12/05 19:55:01.260167, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-16BE [2010/12/05 19:55:01.260198, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-16BE [2010/12/05 19:55:01.260229, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF8 [2010/12/05 19:55:01.260261, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF8 [2010/12/05 19:55:01.260293, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-8 [2010/12/05 19:55:01.260325, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-8 [2010/12/05 19:55:01.260356, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset ASCII [2010/12/05 19:55:01.260392, 5] lib/iconv.c:112(smb_register_charset) Registered charset ASCII [2010/12/05 19:55:01.260423, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset 646 [2010/12/05 19:55:01.260459, 5] lib/iconv.c:112(smb_register_charset) Registered charset 646 [2010/12/05 19:55:01.260490, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset ISO-8859-1 [2010/12/05 19:55:01.260521, 5] lib/iconv.c:112(smb_register_charset) Registered charset ISO-8859-1 [2010/12/05 19:55:01.260552, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS2-HEX [2010/12/05 19:55:01.260585, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS2-HEX [2010/12/05 19:55:01.261425, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.261909, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262023, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262108, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262192, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262273, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262355, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262464, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262550, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262670, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262786, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.262945, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.263083, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.263203, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.263454, 2] lib/tallocmsg.c:106(register_msg_pool_usage) Registered MSG_REQ_POOL_USAGE [2010/12/05 19:55:01.263499, 2] lib/dmallocmsg.c:77(register_dmalloc_msgs) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2010/12/05 19:55:01.263559, 3] param/loadparm.c:9158(lp_load_ex) lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) [2010/12/05 19:55:01.263686, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2010/12/05 19:55:01.263728, 3] param/loadparm.c:7842(do_section) Processing section "[global]" doing parameter workgroup = WORKGROUP doing parameter passdb backend = tdbsam doing parameter printing = cups doing parameter printcap name = cups doing parameter printcap cache time = 750 doing parameter cups options = raw doing parameter map to guest = Bad User doing parameter include = /etc/samba/dhcp.conf [2010/12/05 19:55:01.263975, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/dhcp.conf" doing parameter logon path = \\%L\profiles\.msprofile doing parameter logon home = \\%L\%U\.9xprofile doing parameter logon drive = P: doing parameter usershare allow guests = Yes doing parameter log level = 99 [2010/12/05 19:55:01.264160, 5] lib/debug.c:405(debug_dump_status) INFO: Current debug levels: all: True/99 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter include = registry doing parameter registry shares = yes [2010/12/05 19:55:01.264500, 10] registry/reg_init_smbconf.c:74(registry_init_smbconf) registry_init_smbconf called [2010/12/05 19:55:01.264627, 10] registry/reg_cachehook.c:73(reghook_cache_init) reghook_cache_init: new tree with default ops 0x7f31de2673a0 for key [] [2010/12/05 19:55:01.264701, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.264773, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:55:01.264826, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/05 19:55:01.264879, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 15) -> 4 [2010/12/05 19:55:01.264939, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.264990, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.265041, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:55:01.265096, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 12) -> 4 [2010/12/05 19:55:01.265147, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:55:01.265197, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.265246, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/05 19:55:01.265298, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.265363, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 31) -> 4 [2010/12/05 19:55:01.265415, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.265470, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.265554, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.265606, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/05 19:55:01.265658, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.265711, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 19) -> 4 [2010/12/05 19:55:01.265764, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:55:01.265845, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2010/12/05 19:55:01.265905, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:55:01.265967, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.266003, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 29) -> 29 [2010/12/05 19:55:01.266046, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [Samba Printer Port], len: 2 [2010/12/05 19:55:01.266092, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2010/12/05 19:55:01.266143, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.266197, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 104) -> 4 [2010/12/05 19:55:01.266231, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 100) -> 100 [2010/12/05 19:55:01.266266, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DefaultSpoolDirectory], len: 70 [2010/12/05 19:55:01.266303, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/05 19:55:01.266350, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.266403, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.266437, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/05 19:55:01.266471, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/05 19:55:01.266504, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/05 19:55:01.266538, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/05 19:55:01.266578, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/05 19:55:01.266623, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.266674, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.266708, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/05 19:55:01.266741, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/05 19:55:01.266774, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/05 19:55:01.266809, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/05 19:55:01.266859, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.266903, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de2674a0 for key [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:55:01.266937, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.266974, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [HKLM] [2010/12/05 19:55:01.267025, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [NULL]! [HKLM] [2010/12/05 19:55:01.267058, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [SOFTWARE] [2010/12/05 19:55:01.267092, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [HKLM]! [SOFTWARE] [2010/12/05 19:55:01.267153, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Samba] [2010/12/05 19:55:01.267187, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [SOFTWARE]! [Samba] [2010/12/05 19:55:01.267218, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [smbconf] [2010/12/05 19:55:01.267250, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Samba]! [smbconf] [2010/12/05 19:55:01.267289, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Samba/smbconf] to tree [2010/12/05 19:55:01.267321, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.267352, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (0) [2010/12/05 19:55:01.267419, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.267461, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.267498, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.267535, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.267573, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.267704, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.267741, 10] registry/reg_backend_db.c:469(regdb_open) regdb_open: refcount reset (1) [2010/12/05 19:55:01.267781, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.267819, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (1) [2010/12/05 19:55:01.267861, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.267901, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.267933, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.267964, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.267995, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.268025, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.268055, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.268085, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.268122, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.268175, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.268210, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.268247, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.268292, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.268329, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.268414, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SOFTWARE] [2010/12/05 19:55:01.268453, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (2) [2010/12/05 19:55:01.268490, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE] [2010/12/05 19:55:01.268521, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE] [2010/12/05 19:55:01.268552, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE] [2010/12/05 19:55:01.268583, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.268643, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.268676, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [] [2010/12/05 19:55:01.268708, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.268739, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.268770, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.268800, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.268831, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SOFTWARE] [2010/12/05 19:55:01.268866, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE] [2010/12/05 19:55:01.268914, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.268964, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.268999, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 10 [2010/12/05 19:55:01.269034, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 15) -> 6 [2010/12/05 19:55:01.269071, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.269109, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [3] items [2010/12/05 19:55:01.269146, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE] [2010/12/05 19:55:01.269190, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.269245, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Samba] [2010/12/05 19:55:01.269281, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (3) [2010/12/05 19:55:01.269319, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba] [2010/12/05 19:55:01.269449, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba] [2010/12/05 19:55:01.269490, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba] [2010/12/05 19:55:01.269524, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.269556, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.269587, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba] [2010/12/05 19:55:01.269619, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.269651, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.269683, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [] [2010/12/05 19:55:01.269714, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.269746, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:55:01.269777, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.269808, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.269840, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SOFTWARE/Samba] [2010/12/05 19:55:01.269875, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba] [2010/12/05 19:55:01.269925, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/05 19:55:01.269980, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 25) -> 4 [2010/12/05 19:55:01.270016, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 21) -> 13 [2010/12/05 19:55:01.270075, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 8) -> 8 [2010/12/05 19:55:01.270112, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.270149, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE\Samba] [2010/12/05 19:55:01.270194, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/05 19:55:01.270250, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (3) [2010/12/05 19:55:01.270285, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [smbconf] [2010/12/05 19:55:01.270320, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (3) [2010/12/05 19:55:01.270358, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:55:01.270391, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:55:01.270423, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf] [2010/12/05 19:55:01.270455, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.270486, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.270517, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf] [2010/12/05 19:55:01.270549, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.270580, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.270611, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [smbconf] [2010/12/05 19:55:01.270643, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.270674, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:55:01.270706, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [smbconf], new_path => [] [2010/12/05 19:55:01.270737, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:55:01.270769, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:55:01.270800, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.270830, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.270861, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2674a0 for key [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:55:01.270896, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf] [2010/12/05 19:55:01.270940, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.271014, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SOFTWARE\Samba\smbconf] [2010/12/05 19:55:01.271054, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (3) [2010/12/05 19:55:01.271087, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:55:01.271129, 5] param/loadparm.c:6954(process_registry_service) process_registry_service: service name global [2010/12/05 19:55:01.271169, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [global] [2010/12/05 19:55:01.271203, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (2) [2010/12/05 19:55:01.271243, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:55:01.271303, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:55:01.271336, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf/global] [2010/12/05 19:55:01.271367, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.271398, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.271429, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf/global] [2010/12/05 19:55:01.271460, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.271490, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.271521, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [smbconf/global] [2010/12/05 19:55:01.271552, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.271583, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:55:01.271614, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [smbconf], new_path => [global] [2010/12/05 19:55:01.271645, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:55:01.271675, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:55:01.271706, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [global], new_path => [] [2010/12/05 19:55:01.271738, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [global] [2010/12/05 19:55:01.271769, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.271800, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.271830, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2674a0 for key [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:55:01.271864, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf\global] [2010/12/05 19:55:01.271911, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/05 19:55:01.271948, 10] registry/reg_backend_db.c:1471(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\global] not found [2010/12/05 19:55:01.271982, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:55:01.272019, 2] param/loadparm.c:7859(do_section) Processing section "[homes]" [2010/12/05 19:55:01.272102, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 0 for homes [2010/12/05 19:55:01.272137, 10] param/loadparm.c:6201(hash_a_service) hash_a_service: creating servicehash [2010/12/05 19:55:01.272170, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 0 for service name homes doing parameter comment = Home Directories doing parameter valid users = %S, %D%w%S doing parameter browseable = No doing parameter read only = No doing parameter inherit acls = Yes [2010/12/05 19:55:01.272329, 2] param/loadparm.c:7859(do_section) Processing section "[profiles]" [2010/12/05 19:55:01.272395, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 1 for profiles [2010/12/05 19:55:01.272428, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 1 for service name profiles doing parameter comment = Network Profiles Service doing parameter path = %H doing parameter read only = No doing parameter store dos attributes = Yes doing parameter create mask = 0600 doing parameter directory mask = 0700 [2010/12/05 19:55:01.272622, 2] param/loadparm.c:7859(do_section) Processing section "[users]" [2010/12/05 19:55:01.272715, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 2 for users [2010/12/05 19:55:01.272751, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 2 for service name users doing parameter comment = All users doing parameter path = /home doing parameter read only = No doing parameter inherit acls = Yes doing parameter veto files = /aquota.user/groups/shares/ [2010/12/05 19:55:01.272882, 2] param/loadparm.c:7859(do_section) Processing section "[groups]" [2010/12/05 19:55:01.272955, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 3 for groups [2010/12/05 19:55:01.272989, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 3 for service name groups doing parameter comment = All groups doing parameter path = /home/groups doing parameter read only = No doing parameter inherit acls = Yes [2010/12/05 19:55:01.273093, 2] param/loadparm.c:7859(do_section) Processing section "[printers]" [2010/12/05 19:55:01.273158, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 4 for printers [2010/12/05 19:55:01.273191, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 4 for service name printers doing parameter comment = All Printers doing parameter path = /var/tmp doing parameter printable = Yes doing parameter create mask = 0600 doing parameter browseable = No [2010/12/05 19:55:01.273334, 2] param/loadparm.c:7859(do_section) Processing section "[print$]" [2010/12/05 19:55:01.273400, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 5 for print$ [2010/12/05 19:55:01.273434, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 5 for service name print$ doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter write list = @ntadmin root doing parameter force group = ntadmin doing parameter create mask = 0664 doing parameter directory mask = 0775 [2010/12/05 19:55:01.273590, 2] param/loadparm.c:7859(do_section) Processing section "[srvnfs]" [2010/12/05 19:55:01.273656, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 6 for srvnfs [2010/12/05 19:55:01.273689, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 6 for service name srvnfs doing parameter comment = nfs reexport doing parameter path = /srv/samba/nfs doing parameter writeable = Yes doing parameter create mask = 0777 doing parameter directory mask = 0777 [2010/12/05 19:55:01.273816, 4] param/loadparm.c:9193(lp_load_ex) pm_process() returned Yes [2010/12/05 19:55:01.273906, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 7 for IPC$ [2010/12/05 19:55:01.273941, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 7 for service name IPC$ [2010/12/05 19:55:01.273993, 3] param/loadparm.c:6313(lp_add_ipc) adding IPC service [2010/12/05 19:55:01.274026, 10] param/loadparm.c:8403(set_server_role) set_server_role: role = ROLE_STANDALONE [2010/12/05 19:55:01.274121, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274211, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274301, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274384, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274468, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274549, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274631, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274714, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274796, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.274877, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.275012, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.275105, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.275198, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.275284, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.275336, 3] printing/pcap.c:136(pcap_cache_reload) reloading printcap cache [2010/12/05 19:55:01.275377, 5] printing/print_cups.c:408(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2010/12/05 19:55:01.276121, 10] printing/print_cups.c:425(cups_pcap_load_async) cups_pcap_load_async: child pid = 11786 [2010/12/05 19:55:01.276251, 10] printing/print_cups.c:576(cups_cache_reload) cups_cache_reload: sync read on fd 9 [2010/12/05 19:55:01.276292, 5] printing/print_cups.c:458(cups_async_callback) cups_async_callback: callback received for printer data. fd = 9 [2010/12/05 19:55:01.276659, 5] printing/print_cups.c:169(cups_cache_reload_async) reloading cups printcap cache [2010/12/05 19:55:01.279468, 10] printing/print_cups.c:87(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2010/12/05 19:55:01.295351, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.295496, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.295588, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.295670, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.295753, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.295834, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.295915, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.296022, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.296105, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.296187, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.296274, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.296366, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.296452, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.296538, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.296607, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:55:01.296655, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:55:01.297596, 11] printing/print_cups.c:120(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/05 19:55:01.297660, 11] printing/print_cups.c:126(send_pcap_info) send_pcap_info: writing infolen 51 [2010/12/05 19:55:01.297696, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name samsung_color [2010/12/05 19:55:01.297732, 11] printing/print_cups.c:141(send_pcap_info) send_pcap_info: writing info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:55:01.297764, 11] printing/print_cups.c:120(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/05 19:55:01.297796, 11] printing/print_cups.c:126(send_pcap_info) send_pcap_info: writing infolen 50 [2010/12/05 19:55:01.297827, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name samsung_bw [2010/12/05 19:55:01.297859, 11] printing/print_cups.c:141(send_pcap_info) [2010/12/05 19:55:01.297866, 11] printing/print_cups.c:477(cups_async_callback) send_pcap_info: writing info Samsung CLP-550N via Generic PCL 6/PCL XL Printer cups_async_callback: read namelen 14 [2010/12/05 19:55:01.297972, 11] printing/print_cups.c:491(cups_async_callback) cups_async_callback: read infolen 51 [2010/12/05 19:55:01.298009, 11] printing/print_cups.c:509(cups_async_callback) cups_async_callback: read name samsung_color [2010/12/05 19:55:01.298047, 11] printing/print_cups.c:529(cups_async_callback) cups_async_callback: read info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:55:01.298095, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:55:01.298134, 11] printing/print_cups.c:477(cups_async_callback) cups_async_callback: read namelen 11 [2010/12/05 19:55:01.298168, 11] printing/print_cups.c:491(cups_async_callback) cups_async_callback: read infolen 50 [2010/12/05 19:55:01.298201, 11] printing/print_cups.c:509(cups_async_callback) cups_async_callback: read name samsung_bw [2010/12/05 19:55:01.298236, 11] printing/print_cups.c:529(cups_async_callback) cups_async_callback: read info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:55:01.298269, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:55:01.298312, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:55:01.298348, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:55:01.298396, 3] printing/pcap.c:243(pcap_cache_reload) reload status: ok [2010/12/05 19:55:01.298489, 7] param/loadparm.c:9399(lp_servicenumber) lp_servicenumber: couldn't find samsung_color [2010/12/05 19:55:01.298588, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 8 for samsung_color [2010/12/05 19:55:01.298623, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 8 for service name samsung_color [2010/12/05 19:55:01.298663, 3] param/loadparm.c:6352(lp_add_printer) adding printer service samsung_color [2010/12/05 19:55:01.298723, 7] param/loadparm.c:9399(lp_servicenumber) lp_servicenumber: couldn't find samsung_bw [2010/12/05 19:55:01.298792, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 9 for samsung_bw [2010/12/05 19:55:01.298827, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 9 for service name samsung_bw [2010/12/05 19:55:01.298945, 3] param/loadparm.c:6352(lp_add_printer) adding printer service samsung_bw [2010/12/05 19:55:01.299046, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() registry config changed [2010/12/05 19:55:01.299113, 5] param/loadparm.c:6055(free_service) free_service: Freeing service homes [2010/12/05 19:55:01.299160, 5] param/loadparm.c:6055(free_service) free_service: Freeing service profiles [2010/12/05 19:55:01.299205, 5] param/loadparm.c:6055(free_service) free_service: Freeing service users [2010/12/05 19:55:01.299247, 5] param/loadparm.c:6055(free_service) free_service: Freeing service groups [2010/12/05 19:55:01.299289, 5] param/loadparm.c:6055(free_service) free_service: Freeing service printers [2010/12/05 19:55:01.299330, 5] param/loadparm.c:6055(free_service) free_service: Freeing service print$ [2010/12/05 19:55:01.299373, 5] param/loadparm.c:6055(free_service) free_service: Freeing service srvnfs [2010/12/05 19:55:01.299414, 5] param/loadparm.c:6055(free_service) free_service: Freeing service IPC$ [2010/12/05 19:55:01.299459, 3] param/loadparm.c:9158(lp_load_ex) lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) [2010/12/05 19:55:01.299668, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2010/12/05 19:55:01.299713, 3] param/loadparm.c:7842(do_section) Processing section "[global]" doing parameter workgroup = WORKGROUP doing parameter passdb backend = tdbsam doing parameter printing = cups doing parameter printcap name = cups doing parameter printcap cache time = 750 doing parameter cups options = raw doing parameter map to guest = Bad User doing parameter include = /etc/samba/dhcp.conf [2010/12/05 19:55:01.299963, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/dhcp.conf" doing parameter logon path = \\%L\profiles\.msprofile doing parameter logon home = \\%L\%U\.9xprofile doing parameter logon drive = P: doing parameter usershare allow guests = Yes doing parameter log level = 99 [2010/12/05 19:55:01.300154, 5] lib/debug.c:405(debug_dump_status) INFO: Current debug levels: all: True/99 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter include = registry doing parameter registry shares = yes [2010/12/05 19:55:01.300482, 5] param/loadparm.c:6954(process_registry_service) process_registry_service: service name global [2010/12/05 19:55:01.300519, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [global] [2010/12/05 19:55:01.300557, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (2) [2010/12/05 19:55:01.300603, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:55:01.300637, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:55:01.300671, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf/global] [2010/12/05 19:55:01.300705, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.300738, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.300770, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf/global] [2010/12/05 19:55:01.300802, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.300834, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.300866, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [smbconf/global] [2010/12/05 19:55:01.300897, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.300929, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:55:01.300960, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [smbconf], new_path => [global] [2010/12/05 19:55:01.300992, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:55:01.301024, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:55:01.301056, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [global], new_path => [] [2010/12/05 19:55:01.301090, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [global] [2010/12/05 19:55:01.301122, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.301153, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.301213, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2674a0 for key [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:55:01.301252, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf\global] [2010/12/05 19:55:01.301312, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/05 19:55:01.301355, 10] registry/reg_backend_db.c:1471(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\global] not found [2010/12/05 19:55:01.301389, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:55:01.301429, 2] param/loadparm.c:7859(do_section) Processing section "[homes]" [2010/12/05 19:55:01.301496, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 7 for homes [2010/12/05 19:55:01.301530, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 7 for service name homes doing parameter comment = Home Directories doing parameter valid users = %S, %D%w%S doing parameter browseable = No doing parameter read only = No doing parameter inherit acls = Yes [2010/12/05 19:55:01.301675, 2] param/loadparm.c:7859(do_section) Processing section "[profiles]" [2010/12/05 19:55:01.301740, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 6 for profiles [2010/12/05 19:55:01.301773, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 6 for service name profiles doing parameter comment = Network Profiles Service doing parameter path = %H doing parameter read only = No doing parameter store dos attributes = Yes doing parameter create mask = 0600 doing parameter directory mask = 0700 [2010/12/05 19:55:01.301936, 2] param/loadparm.c:7859(do_section) Processing section "[users]" [2010/12/05 19:55:01.302001, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 5 for users [2010/12/05 19:55:01.302033, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 5 for service name users doing parameter comment = All users doing parameter path = /home doing parameter read only = No doing parameter inherit acls = Yes doing parameter veto files = /aquota.user/groups/shares/ [2010/12/05 19:55:01.302166, 2] param/loadparm.c:7859(do_section) Processing section "[groups]" [2010/12/05 19:55:01.302230, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 4 for groups [2010/12/05 19:55:01.302263, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 4 for service name groups doing parameter comment = All groups doing parameter path = /home/groups doing parameter read only = No doing parameter inherit acls = Yes [2010/12/05 19:55:01.302368, 2] param/loadparm.c:7859(do_section) Processing section "[printers]" [2010/12/05 19:55:01.302431, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 3 for printers [2010/12/05 19:55:01.302464, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 3 for service name printers doing parameter comment = All Printers doing parameter path = /var/tmp doing parameter printable = Yes doing parameter create mask = 0600 doing parameter browseable = No [2010/12/05 19:55:01.302608, 2] param/loadparm.c:7859(do_section) Processing section "[print$]" [2010/12/05 19:55:01.302673, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 2 for print$ [2010/12/05 19:55:01.302706, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 2 for service name print$ doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter write list = @ntadmin root doing parameter force group = ntadmin doing parameter create mask = 0664 doing parameter directory mask = 0775 [2010/12/05 19:55:01.302855, 2] param/loadparm.c:7859(do_section) Processing section "[srvnfs]" [2010/12/05 19:55:01.302967, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 1 for srvnfs [2010/12/05 19:55:01.303016, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 1 for service name srvnfs doing parameter comment = nfs reexport doing parameter path = /srv/samba/nfs doing parameter writeable = Yes doing parameter create mask = 0777 doing parameter directory mask = 0777 [2010/12/05 19:55:01.303146, 4] param/loadparm.c:9193(lp_load_ex) pm_process() returned Yes [2010/12/05 19:55:01.303224, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 0 for IPC$ [2010/12/05 19:55:01.303258, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 0 for service name IPC$ [2010/12/05 19:55:01.303300, 3] param/loadparm.c:6313(lp_add_ipc) adding IPC service [2010/12/05 19:55:01.303333, 10] param/loadparm.c:8403(set_server_role) set_server_role: role = ROLE_STANDALONE [2010/12/05 19:55:01.303474, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.303570, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.303661, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.303744, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.303828, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.303911, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.303994, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.304079, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.304162, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.304245, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.304334, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.304436, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.304525, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.304612, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.304664, 3] printing/pcap.c:136(pcap_cache_reload) reloading printcap cache [2010/12/05 19:55:01.304697, 5] printing/print_cups.c:408(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2010/12/05 19:55:01.305449, 10] printing/print_cups.c:425(cups_pcap_load_async) cups_pcap_load_async: child pid = 11787 [2010/12/05 19:55:01.305565, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:55:01.305613, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:55:01.305649, 10] printing/print_cups.c:591(cups_cache_reload) cups_cache_reload: async read on fd 8 [2010/12/05 19:55:01.305704, 3] printing/pcap.c:243(pcap_cache_reload) reload status: ok [2010/12/05 19:55:01.305948, 5] printing/print_cups.c:169(cups_cache_reload_async) reloading cups printcap cache [2010/12/05 19:55:01.306240, 2] lib/interface.c:340(add_interface) added interface br0 ip=fe80::216:17ff:feba:a4a9%br0 bcast=fe80::ffff:ffff:ffff:ffff%br0 netmask=ffff:ffff:ffff:ffff:: [2010/12/05 19:55:01.306450, 2] lib/interface.c:340(add_interface) added interface br0 ip=192.168.0.22 bcast=192.168.0.255 netmask=255.255.255.0 [2010/12/05 19:55:01.306714, 2] lib/interface.c:340(add_interface) added interface br0 ip=fe80::216:17ff:feba:a4a9%br0 bcast=fe80::ffff:ffff:ffff:ffff%br0 netmask=ffff:ffff:ffff:ffff:: [2010/12/05 19:55:01.306794, 2] lib/interface.c:340(add_interface) added interface br0 ip=192.168.0.22 bcast=192.168.0.255 netmask=255.255.255.0 [2010/12/05 19:55:01.306894, 5] lib/util.c:276(init_names) Netbios name list:- my_netbios_names[0]="GILES" [2010/12/05 19:55:01.307076, 3] smbd/server.c:1161(main) loaded services [2010/12/05 19:55:01.307115, 3] smbd/server.c:1176(main) Becoming a daemon. [2010/12/05 19:55:01.308743, 10] printing/print_cups.c:87(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2010/12/05 19:55:01.309059, 8] ../lib/util/util.c:217(fcntl_lock) fcntl_lock 11 6 0 1 1 [2010/12/05 19:55:01.309214, 8] ../lib/util/util.c:252(fcntl_lock) fcntl_lock: Lock call successful [2010/12/05 19:55:01.309600, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend ldapsam [2010/12/05 19:55:01.309662, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'ldapsam' [2010/12/05 19:55:01.309694, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend ldapsam_compat [2010/12/05 19:55:01.309734, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'ldapsam_compat' [2010/12/05 19:55:01.309769, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend NDS_ldapsam [2010/12/05 19:55:01.309805, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'NDS_ldapsam' [2010/12/05 19:55:01.309836, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend NDS_ldapsam_compat [2010/12/05 19:55:01.309867, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'NDS_ldapsam_compat' [2010/12/05 19:55:01.309901, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend smbpasswd [2010/12/05 19:55:01.309933, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'smbpasswd' [2010/12/05 19:55:01.309967, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend tdbsam [2010/12/05 19:55:01.309999, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'tdbsam' [2010/12/05 19:55:01.310033, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend wbc_sam [2010/12/05 19:55:01.310068, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'wbc_sam' [2010/12/05 19:55:01.310100, 5] passdb/pdb_interface.c:133(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2010/12/05 19:55:01.310131, 5] passdb/pdb_interface.c:154(make_pdb_method_name) Found pdb backend tdbsam [2010/12/05 19:55:01.310175, 5] passdb/pdb_interface.c:165(make_pdb_method_name) pdb backend tdbsam has a valid init [2010/12/05 19:55:01.312155, 5] libsmb/namecache.c:51(namecache_enable) namecache_enable: enabling netbios namecache, timeout 660 seconds [2010/12/05 19:55:01.312215, 10] registry/reg_backend_db.c:399(regdb_init) regdb_init: incrementing refcount (2) [2010/12/05 19:55:01.312300, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.312364, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:55:01.312416, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/05 19:55:01.312468, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 15) -> 4 [2010/12/05 19:55:01.312526, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.312576, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.312626, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:55:01.312679, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 12) -> 4 [2010/12/05 19:55:01.312731, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:55:01.322311, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.322443, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/05 19:55:01.322554, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.322633, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 31) -> 4 [2010/12/05 19:55:01.322684, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.322736, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.322786, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.322837, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/05 19:55:01.322888, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.322939, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 19) -> 4 [2010/12/05 19:55:01.323017, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:55:01.323098, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2010/12/05 19:55:01.323155, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:55:01.323215, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:55:01.323253, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 29) -> 29 [2010/12/05 19:55:01.323337, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [Samba Printer Port], len: 2 [2010/12/05 19:55:01.323394, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2010/12/05 19:55:01.323444, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.323497, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 104) -> 4 [2010/12/05 19:55:01.323528, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 100) -> 100 [2010/12/05 19:55:01.323561, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DefaultSpoolDirectory], len: 70 [2010/12/05 19:55:01.323597, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/05 19:55:01.323643, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.323693, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.323725, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/05 19:55:01.323757, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/05 19:55:01.323789, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/05 19:55:01.323825, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/05 19:55:01.323864, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/05 19:55:01.323907, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.323958, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.323990, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/05 19:55:01.324022, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/05 19:55:01.324053, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/05 19:55:01.324085, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/05 19:55:01.324129, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de267640 for key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2010/12/05 19:55:01.324170, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.324206, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.324237, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.324295, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.324326, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [SYSTEM] [2010/12/05 19:55:01.324359, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [SYSTEM], child -> [SOFTWARE] [2010/12/05 19:55:01.324390, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:55:01.324420, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:55:01.324451, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [CurrentControlSet] [2010/12/05 19:55:01.324482, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [SYSTEM]! [CurrentControlSet] [2010/12/05 19:55:01.324513, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Control] [2010/12/05 19:55:01.324544, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [CurrentControlSet]! [Control] [2010/12/05 19:55:01.324574, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Print] [2010/12/05 19:55:01.324605, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Control]! [Print] [2010/12/05 19:55:01.324635, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2010/12/05 19:55:01.324666, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.324702, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de267640 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] [2010/12/05 19:55:01.324738, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.324769, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.324799, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.324829, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.324859, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.324889, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.324919, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.324949, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Microsoft] [2010/12/05 19:55:01.324981, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Microsoft], child -> [Samba] [2010/12/05 19:55:01.325012, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/05 19:55:01.325042, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Windows NT] [2010/12/05 19:55:01.325074, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Microsoft]! [Windows NT] [2010/12/05 19:55:01.325106, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [CurrentVersion] [2010/12/05 19:55:01.325138, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Windows NT]! [CurrentVersion] [2010/12/05 19:55:01.325168, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Print] [2010/12/05 19:55:01.325200, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [CurrentVersion]! [Print] [2010/12/05 19:55:01.325230, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Printers] [2010/12/05 19:55:01.325261, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Print]! [Printers] [2010/12/05 19:55:01.325320, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree [2010/12/05 19:55:01.325354, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.325388, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de267640 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2010/12/05 19:55:01.325422, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.325452, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.325482, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.325512, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.325542, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.325571, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.325602, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:55:01.325631, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.325661, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/05 19:55:01.325692, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/05 19:55:01.325722, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/05 19:55:01.325752, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/05 19:55:01.325782, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/05 19:55:01.325812, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Print] [2010/12/05 19:55:01.325842, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Ports] [2010/12/05 19:55:01.325874, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Ports], child -> [Print] [2010/12/05 19:55:01.325905, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/05 19:55:01.325935, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree [2010/12/05 19:55:01.325967, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.326002, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de2676a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] [2010/12/05 19:55:01.326035, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.326065, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.326095, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.326125, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.326155, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.326184, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.326215, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.326245, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.326275, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.326304, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Services] [2010/12/05 19:55:01.326369, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Services], child -> [Control] [2010/12/05 19:55:01.326401, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:55:01.326431, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:55:01.326462, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [LanmanServer] [2010/12/05 19:55:01.326493, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Services]! [LanmanServer] [2010/12/05 19:55:01.326524, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Shares] [2010/12/05 19:55:01.326556, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [LanmanServer]! [Shares] [2010/12/05 19:55:01.326586, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree [2010/12/05 19:55:01.326619, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.326653, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de2674a0 for key [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:55:01.326684, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.326716, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.326746, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.326776, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.326806, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.326836, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.326865, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:55:01.326895, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.326925, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:55:01.326955, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:55:01.327003, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:55:01.327034, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Samba/smbconf] to tree [2010/12/05 19:55:01.327065, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.327099, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de267700 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters] [2010/12/05 19:55:01.327132, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.327163, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.327192, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.327222, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.327252, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.327282, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.327313, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.327342, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.327373, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.327439, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.327472, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.327503, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.327534, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Netlogon] [2010/12/05 19:55:01.327567, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Netlogon], child -> [LanmanServer] [2010/12/05 19:55:01.327600, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:55:01.327631, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:55:01.327662, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Parameters] [2010/12/05 19:55:01.327695, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Netlogon]! [Parameters] [2010/12/05 19:55:01.327726, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters] to tree [2010/12/05 19:55:01.327760, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.327795, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de267760 for key [/HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions] [2010/12/05 19:55:01.327829, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.327860, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.327890, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.327922, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.327952, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.327984, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.328016, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.328047, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.328079, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.328110, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.334046, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Control] [2010/12/05 19:55:01.334102, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Print] [2010/12/05 19:55:01.334133, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [ProductOptions] [2010/12/05 19:55:01.334169, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [ProductOptions], child -> [Print] [2010/12/05 19:55:01.334201, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:55:01.334232, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:55:01.334266, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions] to tree [2010/12/05 19:55:01.334319, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.334364, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de2677c0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters] [2010/12/05 19:55:01.334400, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.334430, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.334508, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.334540, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.334570, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.334600, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.334630, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.334660, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.334690, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.334720, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.334749, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.334779, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.334809, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.334839, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Tcpip] [2010/12/05 19:55:01.334870, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Tcpip], child -> [Netlogon] [2010/12/05 19:55:01.334900, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [2] [2010/12/05 19:55:01.334930, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [2]) [2010/12/05 19:55:01.334960, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Parameters] [2010/12/05 19:55:01.335248, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Tcpip]! [Parameters] [2010/12/05 19:55:01.335286, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters] to tree [2010/12/05 19:55:01.335320, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.335356, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de267820 for key [/HKPT] [2010/12/05 19:55:01.335387, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.335417, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.335448, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [HKPT] [2010/12/05 19:55:01.335481, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [HKPT], child -> [HKLM] [2010/12/05 19:55:01.335511, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:55:01.335541, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:55:01.335571, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKPT] to tree [2010/12/05 19:55:01.335602, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.335648, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de267880 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion] [2010/12/05 19:55:01.335682, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.335712, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.335743, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.335773, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.335832, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.335864, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.335894, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.335924, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:55:01.335954, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.335984, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/05 19:55:01.336015, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/05 19:55:01.336045, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/05 19:55:01.336075, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/05 19:55:01.336106, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/05 19:55:01.336136, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion] to tree [2010/12/05 19:55:01.336167, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.336204, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7f31de2678e0 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib] [2010/12/05 19:55:01.336237, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:55:01.336267, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.336297, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.336327, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.336357, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.336387, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.336416, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:55:01.336447, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:55:01.336476, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:55:01.336506, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/05 19:55:01.336536, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/05 19:55:01.336566, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/05 19:55:01.336596, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/05 19:55:01.336627, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/05 19:55:01.336657, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Ports] [2010/12/05 19:55:01.336687, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Perflib] [2010/12/05 19:55:01.336718, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Print] [2010/12/05 19:55:01.336749, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Ports] [2010/12/05 19:55:01.336779, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/05 19:55:01.336809, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib] to tree [2010/12/05 19:55:01.336868, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:55:01.336901, 20] registry/reg_cachehook.c:144(reghook_dump_cache) reghook_dump_cache: Starting cache dump now... [2010/12/05 19:55:01.336934, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/: [HKLM] (NULL) [2010/12/05 19:55:01.336972, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/: [SOFTWARE] (NULL) [2010/12/05 19:55:01.337019, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/: [Microsoft] (NULL) [2010/12/05 19:55:01.337054, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/: [Windows NT] (NULL) [2010/12/05 19:55:01.337088, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/: [CurrentVersion] (data) [2010/12/05 19:55:01.337128, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Perflib] (data) [2010/12/05 19:55:01.337163, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Ports] (data) [2010/12/05 19:55:01.337199, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Print] (NULL) [2010/12/05 19:55:01.337233, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/: [Printers] (data) [2010/12/05 19:55:01.337269, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/: [Samba] (NULL) [2010/12/05 19:55:01.337302, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Samba/: [smbconf] (data) [2010/12/05 19:55:01.337344, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/: [SYSTEM] (NULL) [2010/12/05 19:55:01.337378, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/: [CurrentControlSet] (NULL) [2010/12/05 19:55:01.337412, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/: [Control] (NULL) [2010/12/05 19:55:01.337447, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [Print] (data) [2010/12/05 19:55:01.337482, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [ProductOptions] (data) [2010/12/05 19:55:01.337517, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/: [Services] (NULL) [2010/12/05 19:55:01.337552, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [LanmanServer] (NULL) [2010/12/05 19:55:01.337594, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/: [Shares] (data) [2010/12/05 19:55:01.337630, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Netlogon] (NULL) [2010/12/05 19:55:01.337665, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/: [Parameters] (data) [2010/12/05 19:55:01.337701, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Tcpip] (NULL) [2010/12/05 19:55:01.337735, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/: [Parameters] (data) [2010/12/05 19:55:01.337782, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/: [HKPT] (data) [2010/12/05 19:55:01.339247, 5] lib/gencache.c:65(gencache_init) Opening cache file at /var/lib/samba/gencache.tdb [2010/12/05 19:55:01.339445, 5] lib/gencache.c:108(gencache_init) Opening cache file at /var/lib/samba/gencache_notrans.tdb [2010/12/05 19:55:01.339690, 10] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/UID2SID/0 couldn't be found [2010/12/05 19:55:01.352240, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.352374, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.352467, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.352601, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.352685, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.352767, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.352849, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.352932, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.353230, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.353325, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.353417, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.353512, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.353600, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.353689, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.353753, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:55:01.353813, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:55:01.353900, 5] passdb/lookup_sid.c:1342(uid_to_sid) uid_to_sid: winbind failed to find a sid for uid 0 [2010/12/05 19:55:01.353981, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.354022, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.354059, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.354092, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.354127, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.354359, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:55:01.354401, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/12/05 19:55:01.354432, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:55:01.354463, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.354493, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.354715, 4] passdb/pdb_tdb.c:518(tdbsam_open) tdbsam_open: successfully opened /etc/samba/passdb.tdb [2010/12/05 19:55:01.354764, 5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_root [2010/12/05 19:55:01.354817, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.354851, 5] passdb/pdb_interface.c:1214(pdb_default_uid_to_sid) [2010/12/05 19:55:01.354852, 11] printing/print_cups.c:120(send_pcap_info) pdb_default_uid_to_sid: Did not find user root (0) send_pcap_info: writing namelen 14 [2010/12/05 19:55:01.354913, 3] smbd/sec_ctx.c:418(pop_sec_ctx) [2010/12/05 19:55:01.354918, 11] printing/print_cups.c:126(send_pcap_info) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 send_pcap_info: writing infolen 51 [2010/12/05 19:55:01.354968, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name samsung_color [2010/12/05 19:55:01.354963, 10] passdb/lookup_sid.c:1159(legacy_uid_to_sid) [2010/12/05 19:55:01.355006, 11] printing/print_cups.c:141(send_pcap_info) LEGACY: uid 0 -> sid S-1-22-1-0 send_pcap_info: writing info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:55:01.355072, 10] lib/gencache.c:334(gencache_get_data_blob) [2010/12/05 19:55:01.355080, 11] printing/print_cups.c:120(send_pcap_info) Cache entry with key = IDMAP/GID2SID/0 couldn't be found send_pcap_info: writing namelen 11 [2010/12/05 19:55:01.355129, 11] printing/print_cups.c:126(send_pcap_info) send_pcap_info: writing infolen 50 [2010/12/05 19:55:01.355162, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name samsung_bw [2010/12/05 19:55:01.355195, 11] printing/print_cups.c:141(send_pcap_info) send_pcap_info: writing info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:55:01.362267, 5] passdb/lookup_sid.c:1395(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 0 [2010/12/05 19:55:01.362338, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.362375, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.362408, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.362440, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.362471, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.363191, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.363232, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid) LEGACY: gid 0 -> sid S-1-22-2-0 [2010/12/05 19:55:01.363278, 10] auth/token_util.c:356(create_local_nt_token) Create local NT token for S-1-22-1-0 [2010/12/05 19:55:01.363346, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-544, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:55:01.363431, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.363465, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.363495, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.363525, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.363554, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.363695, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.363731, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-544 [2010/12/05 19:55:01.363765, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.363796, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.363827, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.363857, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.363886, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.363949, 3] auth/token_util.c:436(create_local_nt_token) Failed to fetch domain sid for WORKGROUP [2010/12/05 19:55:01.363990, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.364043, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-545, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:55:01.364102, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.364134, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.364165, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.364244, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.364279, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.364392, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.364428, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-545 [2010/12/05 19:55:01.364462, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.364494, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.364524, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.364555, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.364584, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.364640, 3] auth/token_util.c:467(create_local_nt_token) Failed to fetch domain sid for WORKGROUP [2010/12/05 19:55:01.364680, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.364713, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.364744, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.364774, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.364805, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.364835, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.365193, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.365326, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-1-0] [2010/12/05 19:55:01.365379, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-5-32-544 Privilege set: SE_PRIV 0xff0 0x0 0x0 0x0 [2010/12/05 19:55:01.365454, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:55:01.365520, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/12/05 19:55:01.365563, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-11] [2010/12/05 19:55:01.365612, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.365659, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (3) [2010/12/05 19:55:01.365704, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.365735, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.365766, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.365797, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.365829, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.365861, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.365892, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.365922, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.365952, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.365987, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.366070, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.366115, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.366157, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.366194, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.366230, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.366305, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.366341, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.366378, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.366409, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.366440, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.366471, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.366502, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.366532, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.366563, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.366595, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.366634, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.366666, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.366696, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.366726, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.366756, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.366789, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.366832, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.366877, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.366911, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.366945, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.367017, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.367064, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.367116, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.367150, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.367195, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.367227, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.367259, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.367290, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.367321, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.367351, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.367409, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.367442, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.367472, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.367502, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.367533, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.367565, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.367596, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.367626, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.367656, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.367686, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.367720, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.367771, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.367817, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.367851, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.367884, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.367920, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.367954, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.367997, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.368050, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.368084, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.368116, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.368154, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.368185, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.368216, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.368247, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.368277, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.368307, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.368337, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.368368, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.368400, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.368430, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.368461, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.368491, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.368522, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.368586, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.368618, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.368648, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.368679, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.368709, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.368738, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.368767, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.368801, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.368846, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.368893, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.368926, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.368961, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.368996, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.369039, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.369077, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.369114, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.369150, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.369185, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.369220, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.369264, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.369316, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.369350, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.369383, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.369426, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.369472, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.369506, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.369540, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.369576, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.369611, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.369646, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.369681, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.369716, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.369751, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.369810, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.369850, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.369895, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.369950, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.369984, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.370045, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.370081, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.370115, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.370150, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.370185, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.370221, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.370256, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.370302, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.370335, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.370371, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.370400, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.370431, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.370461, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.370491, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.370521, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.370550, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.370580, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.370609, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.370641, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.370691, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.370724, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.370758, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.370800, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.370834, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.370890, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.370923, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.370959, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.374104, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.374161, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.374193, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.374224, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.374253, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.374282, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.374312, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.374342, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.374371, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.374400, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.374468, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.374498, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.374550, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.374607, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.374657, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.374691, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.374728, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.374762, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.374802, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.374859, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.374894, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.374933, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.374963, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.377399, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.377415, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.377428, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.377446, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.377460, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.377474, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.377488, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.377504, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.377517, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.377531, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.377546, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.377559, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.377573, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.377586, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.377602, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.377622, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.377643, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.377659, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.377675, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.377694, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.377710, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.377730, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.377767, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.377783, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.377798, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.377816, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.377831, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.377845, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.377860, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.377874, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.377888, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.377903, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.377918, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.377932, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.377947, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.377961, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.377975, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.377989, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.378004, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.378018, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.378032, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.378047, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.378061, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.378079, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.378092, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.378108, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.378129, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.378151, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.378167, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.378183, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.378200, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.378216, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.378232, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.378252, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.378269, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.378286, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.378302, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.378336, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.378361, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.378377, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2010/12/05 19:55:01.378392, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.378410, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.378424, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.378439, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.378454, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.378468, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.378482, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.378496, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.378511, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.378525, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.378539, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.378554, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler] [2010/12/05 19:55:01.378568, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.378582, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.378596, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler] [2010/12/05 19:55:01.378611, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.378626, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.378640, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.378655, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [] [2010/12/05 19:55:01.378670, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.378684, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.378698, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.378712, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/05 19:55:01.378727, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.378744, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.378758, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.378776, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:55:01.378797, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.378819, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.378836, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.378864, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.378880, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:55:01.378901, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.378925, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.378941, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.378958, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:55:01.378988, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.379011, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.379026, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.379042, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.379070, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.379088, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:55:01.379110, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.379131, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.379147, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.379163, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.379338, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379384, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379425, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379463, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379501, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379538, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379575, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379613, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379651, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379689, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379729, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379772, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379811, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379851, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:55:01.379898, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:55:01.379922, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.379940, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:55:01.379956, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/05 19:55:01.379971, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/05 19:55:01.379987, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/05 19:55:01.380002, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/05 19:55:01.380030, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 48 [2010/12/05 19:55:01.380046, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -155) -> 76 [2010/12/05 19:55:01.380060, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -231) -> 126 [2010/12/05 19:55:01.380075, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 357) -> 4 [2010/12/05 19:55:01.380090, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 353) -> 18 [2010/12/05 19:55:01.380104, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 335) -> 17 [2010/12/05 19:55:01.380120, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 318) -> 25 [2010/12/05 19:55:01.380135, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 293) -> 43 [2010/12/05 19:55:01.380150, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 250) -> 48 [2010/12/05 19:55:01.380164, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 202) -> 76 [2010/12/05 19:55:01.380179, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 126) -> 126 [2010/12/05 19:55:01.380202, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.380238, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.380256, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.380274, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.380288, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.380303, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.380317, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.380331, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.380346, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.380360, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.380374, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.380388, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.380403, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.380426, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.380442, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.380458, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.380475, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.380491, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.380517, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.380534, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.380551, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.380565, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.380580, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.380595, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.380609, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.380623, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.380637, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.380665, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.380680, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.380695, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.380709, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.380723, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.380737, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.380752, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.380771, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.380792, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.380808, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.380824, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.380840, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.380859, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.380882, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.380898, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.380915, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.380930, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.380944, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.380959, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.380973, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.380987, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.381001, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.381015, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.381030, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.381045, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.381060, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.381074, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.381089, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.381104, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.381117, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.381131, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.381147, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.381167, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.381188, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.381216, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.381232, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.381249, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.381265, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.381284, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.381308, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.381324, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.381339, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.381357, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.381372, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.381387, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.381402, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.381416, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.381431, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.381446, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.381461, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.381476, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.381490, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.381504, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.381519, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.381535, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.381550, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.381564, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.381578, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.381593, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.381607, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.381621, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.381635, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.381651, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.381671, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.381693, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.381709, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.381726, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.381742, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.381759, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.381789, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.381806, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.381823, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.381840, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.381860, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.381882, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.381907, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.381923, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2010/12/05 19:55:01.381939, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.381957, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.381972, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.381987, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.382003, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.382017, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.382032, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.382046, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.382061, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.382075, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.382090, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.382104, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler] [2010/12/05 19:55:01.382119, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.382133, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.382147, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler] [2010/12/05 19:55:01.382162, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.382177, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.382192, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.382206, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [] [2010/12/05 19:55:01.382221, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.382235, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.382249, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.382263, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/05 19:55:01.382278, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.382292, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.382306, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:55:01.382337, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:55:01.382359, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.382381, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.382396, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.382412, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.382428, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:55:01.382449, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.382474, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.382490, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/05 19:55:01.382505, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.382523, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:55:01.382539, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:55:01.382554, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:55:01.382570, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.382584, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.382598, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.382613, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:55:01.382627, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.382642, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.382656, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.382670, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler/Security] [2010/12/05 19:55:01.382685, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.382699, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.382713, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler/Security] [2010/12/05 19:55:01.382728, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.382742, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.382757, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.382771, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [Security] [2010/12/05 19:55:01.382785, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.382799, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.382814, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.382840, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/05 19:55:01.382855, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.382869, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.382883, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:55:01.382900, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/05 19:55:01.382922, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.382945, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/05 19:55:01.382962, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/05 19:55:01.382993, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.383019, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.383035, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.383066, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/05 19:55:01.383088, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.383106, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:55:01.383121, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/05 19:55:01.383136, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/05 19:55:01.383151, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/05 19:55:01.383173, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.383198, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.383216, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.383238, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.383260, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.383276, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.383293, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.383310, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.383327, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.383344, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.383360, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.383377, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.383393, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.383412, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.383428, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.383445, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.383459, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.383474, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.383488, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.383515, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.383530, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.383544, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.383558, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.383573, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.383589, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.383612, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.383628, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.383644, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.383660, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.383677, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.383704, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.383721, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.383737, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.383752, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.383767, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.383781, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.383795, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.383810, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.383824, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.383838, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.383852, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.383867, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.383882, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.383896, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.383910, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.383925, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.383944, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.383965, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.383982, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.383999, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.384015, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.384035, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.384063, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.384080, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.384098, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.384125, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.384140, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.384154, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.384168, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.384183, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.384197, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.384212, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.384226, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.384240, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.384255, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.384269, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.384284, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.384298, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.384312, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.384326, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.384342, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.384362, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.384383, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.384399, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.384415, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.384432, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.384448, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.384467, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.384495, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.384511, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.384526, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.384544, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.384558, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.384573, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.384587, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.384602, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.384616, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.384630, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.384657, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.384672, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.384686, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.384701, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.384716, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.384730, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.384745, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.384759, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.384774, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.384788, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.384802, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.384816, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.384830, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.384846, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.384867, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.384889, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.384905, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.384920, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.384936, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.384956, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.384973, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.384989, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.385006, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.385022, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.385040, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.385061, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.385085, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.385101, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2010/12/05 19:55:01.385116, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.385134, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.385149, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.385163, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.385178, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.385192, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.385206, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.385233, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.385248, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.385262, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.385276, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.385291, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON] [2010/12/05 19:55:01.385305, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.385319, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.385333, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON] [2010/12/05 19:55:01.385348, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.385362, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.385377, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.385391, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [] [2010/12/05 19:55:01.385405, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.385420, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.385434, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.385448, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/05 19:55:01.385463, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.385476, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.385491, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.385508, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:55:01.385529, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.385550, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/05 19:55:01.385566, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/05 19:55:01.385583, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.385603, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.385620, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:55:01.385641, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.385666, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.385681, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.385697, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:55:01.385718, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.385739, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/05 19:55:01.385755, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/05 19:55:01.385770, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.385799, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.385822, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.385840, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:55:01.385861, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.385882, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/05 19:55:01.385898, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/05 19:55:01.385914, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.385930, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.385963, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:55:01.385985, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.386002, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:55:01.386017, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/05 19:55:01.386031, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/05 19:55:01.386046, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/05 19:55:01.386060, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/05 19:55:01.386075, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 40 [2010/12/05 19:55:01.386089, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -147) -> 76 [2010/12/05 19:55:01.386103, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -223) -> 186 [2010/12/05 19:55:01.386118, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 409) -> 4 [2010/12/05 19:55:01.386133, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 405) -> 18 [2010/12/05 19:55:01.386147, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 387) -> 17 [2010/12/05 19:55:01.386162, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 370) -> 25 [2010/12/05 19:55:01.386176, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 345) -> 43 [2010/12/05 19:55:01.386191, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 302) -> 40 [2010/12/05 19:55:01.386205, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 262) -> 76 [2010/12/05 19:55:01.386223, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 186) -> 186 [2010/12/05 19:55:01.386247, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.386266, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.386281, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.386298, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.386312, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.386326, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.386340, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.386354, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.386369, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.386383, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.386397, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.386411, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.386426, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.386461, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.386477, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.386492, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.386509, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.386525, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.386551, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.386567, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.386583, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.386597, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.386612, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.386626, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.386640, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.386654, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.386669, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.386683, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.386697, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.386712, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.386726, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.386739, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.386753, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.386769, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.386788, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.386809, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.386824, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.386840, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.386855, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.386874, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.386898, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.386913, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.386931, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.386945, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.386959, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.386974, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.386998, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.387012, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.387038, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.387053, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.387067, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.387081, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.387095, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.387110, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.387124, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.387138, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.387152, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.387166, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.387182, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.387203, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.387224, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.387239, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.387255, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.387272, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.387290, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.387311, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.387335, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.387351, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.387367, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.387385, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.387399, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.387414, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.387428, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.387442, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.387457, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.387471, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.387485, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.387499, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.387514, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.387528, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.387542, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.387569, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.387585, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.387600, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.387614, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.387628, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.387643, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.387657, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.387671, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.387687, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.387708, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.387730, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.387745, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.387765, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.387782, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.387798, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.387815, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.387832, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.387849, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.387865, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.387883, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.387905, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.387929, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.387945, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2010/12/05 19:55:01.387961, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.387981, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.387996, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.388010, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.388026, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.388040, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.388054, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.388069, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.388084, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.388099, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.388113, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.388128, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON] [2010/12/05 19:55:01.388156, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.388172, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.388186, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON] [2010/12/05 19:55:01.388200, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.388215, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.388229, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.388243, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [] [2010/12/05 19:55:01.388257, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.388271, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.388286, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.388300, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/05 19:55:01.388314, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.388328, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.388341, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:55:01.388359, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:55:01.388380, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.388402, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/05 19:55:01.388418, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/05 19:55:01.388438, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.388455, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.388472, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:55:01.388493, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.388517, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.388533, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/05 19:55:01.388549, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.388567, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:55:01.388584, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:55:01.388598, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:55:01.388614, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.388629, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.388643, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.388657, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:55:01.388672, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.388699, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.388714, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.388728, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON/Security] [2010/12/05 19:55:01.388744, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.388758, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.388773, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON/Security] [2010/12/05 19:55:01.388787, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.388801, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.388816, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.388831, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [Security] [2010/12/05 19:55:01.388846, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.388860, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.388876, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.388891, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/05 19:55:01.388906, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Security], new_path => [] [2010/12/05 19:55:01.388921, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Parameters] [2010/12/05 19:55:01.388936, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Security] [2010/12/05 19:55:01.388951, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.388966, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.388980, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:55:01.389001, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/05 19:55:01.389023, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:55:01.389045, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/05 19:55:01.389061, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/05 19:55:01.389083, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:55:01.389109, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.389125, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.389147, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/05 19:55:01.389169, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:55:01.389186, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:55:01.389201, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/05 19:55:01.389216, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/05 19:55:01.389242, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/05 19:55:01.389265, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.389289, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.389307, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.389328, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.389350, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.389366, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.389382, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.389398, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.389415, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.389432, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.389448, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.389466, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.389483, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.389501, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.389516, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.389533, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.389548, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.389562, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.389577, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.389591, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.389605, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.389620, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.389634, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.389648, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.389663, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.389686, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.389703, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.389719, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.389735, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.389753, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.389780, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.389796, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.389813, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.389828, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.389843, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.389858, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.389874, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.389901, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.389915, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.389930, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.389944, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.389959, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.389973, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.389988, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.390001, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.390020, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.390040, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.390061, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.390078, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.390094, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.390110, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.390130, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.390154, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.390171, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.390189, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.390204, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.390218, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.390233, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.390247, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.390262, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.390276, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.390291, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.390305, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.390319, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.390334, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.390348, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.390362, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.390377, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.390391, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.390405, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.390424, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.390457, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.390479, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.390494, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.390510, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.390527, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.390544, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.390564, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.390588, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.390603, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.390619, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.390637, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.390651, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.390666, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.390680, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.390695, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.390709, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.390723, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.390738, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.390752, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.390766, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.390781, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.390795, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.390809, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.390824, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.390839, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.390853, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.390868, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.390882, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.390896, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.390910, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.390926, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.390955, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.390985, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.391002, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.391031, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.391048, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.391064, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.391081, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.391097, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.391113, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.391129, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.391147, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.391168, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.391193, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.391209, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2010/12/05 19:55:01.391225, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.391243, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.391258, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.391273, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.391289, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.391304, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.391318, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.391333, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.391347, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.391362, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.391377, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.391391, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry] [2010/12/05 19:55:01.391406, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.391420, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.391435, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry] [2010/12/05 19:55:01.391450, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.391464, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.391478, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.391492, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [] [2010/12/05 19:55:01.391507, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.391521, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.391535, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.391549, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/05 19:55:01.391576, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.391590, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.391604, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.391624, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:55:01.391646, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.391668, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.391684, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.391700, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.391716, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:55:01.391737, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.391762, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.391778, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.391793, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:55:01.391814, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.391836, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.391851, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.391867, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.391890, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.391908, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:55:01.391929, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.391951, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.391966, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.391982, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.392017, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:55:01.392195, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.392213, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:55:01.392228, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/05 19:55:01.392242, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/05 19:55:01.392257, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/05 19:55:01.392271, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/05 19:55:01.392286, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 68 [2010/12/05 19:55:01.392301, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -175) -> 76 [2010/12/05 19:55:01.392315, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -251) -> 146 [2010/12/05 19:55:01.392334, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 397) -> 4 [2010/12/05 19:55:01.392349, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 393) -> 18 [2010/12/05 19:55:01.392363, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 375) -> 17 [2010/12/05 19:55:01.392378, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 358) -> 25 [2010/12/05 19:55:01.392407, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 333) -> 43 [2010/12/05 19:55:01.392422, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 290) -> 68 [2010/12/05 19:55:01.392437, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 222) -> 76 [2010/12/05 19:55:01.392451, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 146) -> 146 [2010/12/05 19:55:01.392478, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.392496, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.392512, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.392529, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.392543, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.392557, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.392572, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.392586, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.392600, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.392615, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.392629, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.392642, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.392659, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.392682, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.392698, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.392714, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.392731, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.392746, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.392773, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.392789, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.392806, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.392820, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.392835, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.392849, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.392864, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.392878, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.392893, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.392907, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.392922, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.392936, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.392951, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.392965, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.392991, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.393008, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.393028, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.393049, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.393065, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.393081, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.393097, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.393116, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.393140, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.393156, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.393174, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.393188, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.393203, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.393218, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.393233, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.393248, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.393262, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.393277, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.393291, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.393306, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.393320, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.393335, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.393349, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.393364, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.393377, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.393391, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.393407, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.393431, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.393453, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.393468, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.393484, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.393501, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.393517, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.393536, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.393560, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.393591, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.393607, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.393624, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.393639, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.393653, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.393668, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.393682, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.393697, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.393711, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.393726, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.393740, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.393754, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.393769, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.393783, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.393798, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.393816, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.393831, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.393846, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.393860, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.393875, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.393889, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.393902, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.393918, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.393939, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.393960, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.393976, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.393992, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.394008, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.394028, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.394046, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.394062, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.394078, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.394095, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.394111, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.394143, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.394168, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.394184, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2010/12/05 19:55:01.394199, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.394217, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.394232, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.394246, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.394261, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.394275, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.394289, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.394304, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.394318, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.394332, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.394346, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.394361, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry] [2010/12/05 19:55:01.394375, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.394390, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.394404, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry] [2010/12/05 19:55:01.394418, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.394433, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.394448, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.394463, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [] [2010/12/05 19:55:01.394481, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.394496, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.394510, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.394525, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/05 19:55:01.394539, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.394553, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.394567, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:55:01.394583, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:55:01.394604, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.394626, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.394642, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.394670, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.394686, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:55:01.394707, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.394734, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.394751, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/05 19:55:01.394766, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.394784, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:55:01.394800, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:55:01.394815, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:55:01.394831, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.394845, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.394859, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.394874, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:55:01.394890, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.394905, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.394919, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.394933, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry/Security] [2010/12/05 19:55:01.394948, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.394963, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.394987, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry/Security] [2010/12/05 19:55:01.395002, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.395017, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.395031, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.395046, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [Security] [2010/12/05 19:55:01.395060, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.395075, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.395089, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.395103, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/05 19:55:01.395118, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.395136, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.395150, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:55:01.395179, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/05 19:55:01.395202, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.395223, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/05 19:55:01.395240, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/05 19:55:01.395262, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.395287, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.395302, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.395335, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/05 19:55:01.395358, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.395376, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:55:01.395391, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/05 19:55:01.395406, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/05 19:55:01.395421, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/05 19:55:01.395443, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.395469, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.395487, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.395508, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.395530, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.395545, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.395561, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.395577, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.395593, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.395610, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.395626, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.395642, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.395658, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.395676, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.395691, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.395708, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.395722, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.395736, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.395751, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.395766, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.395780, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.395794, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.395808, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.395835, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.395850, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.395873, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.395889, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.395905, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.395922, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.395938, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.395963, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.395980, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.395997, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.396012, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.396026, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.396041, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.396055, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.396069, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.396084, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.396098, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.396113, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.396127, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.396142, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.396155, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.396169, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.396185, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.396204, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.396225, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.396241, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.396256, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.396272, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.396291, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.396314, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.396330, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.396347, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.396362, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.396376, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.396391, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.396416, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.396432, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.396446, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.396461, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.396475, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.396489, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.396503, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.396518, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.396532, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.396547, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.396562, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.396575, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.396591, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.396611, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.396633, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.396649, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.396664, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.396680, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.396696, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.396715, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.396739, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.396755, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.396770, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.396787, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.396802, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.396816, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.396831, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.396845, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.396859, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.396873, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.396888, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.396902, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.396916, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.396930, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.396957, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.396972, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.396986, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.397000, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.397015, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.397029, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.397044, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.397058, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.397072, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.397092, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.397113, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.397135, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.397151, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.397167, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.397184, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.397200, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.397217, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.397233, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.397253, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.397270, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.397287, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.397307, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.397331, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.397347, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2010/12/05 19:55:01.397362, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.397380, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.397395, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.397410, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.397425, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.397439, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.397453, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.397467, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.397482, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.397496, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.397510, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.397537, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS] [2010/12/05 19:55:01.397552, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.397567, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.397581, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS] [2010/12/05 19:55:01.397595, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.397610, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.397624, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.397638, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [] [2010/12/05 19:55:01.397653, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.397667, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.397681, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.397695, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/05 19:55:01.397710, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.397723, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.397741, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.397757, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:55:01.397778, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.397800, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.397816, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.397832, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.397848, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:55:01.397869, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.397893, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.397908, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.397924, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:55:01.397945, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.397966, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.397982, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.397998, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.398021, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.398039, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:55:01.398060, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.398081, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.398097, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.398113, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.398170, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:55:01.398193, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.398211, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:55:01.398225, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/05 19:55:01.398240, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/05 19:55:01.398255, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/05 19:55:01.398270, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/05 19:55:01.398285, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 94 [2010/12/05 19:55:01.398299, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -201) -> 76 [2010/12/05 19:55:01.398314, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -277) -> 200 [2010/12/05 19:55:01.398329, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 477) -> 4 [2010/12/05 19:55:01.398344, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 473) -> 18 [2010/12/05 19:55:01.398359, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 455) -> 17 [2010/12/05 19:55:01.398374, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 438) -> 25 [2010/12/05 19:55:01.398389, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 413) -> 43 [2010/12/05 19:55:01.398404, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 370) -> 94 [2010/12/05 19:55:01.398418, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 276) -> 76 [2010/12/05 19:55:01.398433, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 200) -> 200 [2010/12/05 19:55:01.398456, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.398474, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:55:01.398490, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:55:01.398507, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:55:01.398521, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:55:01.398535, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:55:01.398550, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.398564, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.398579, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.398593, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.398607, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.398622, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM] [2010/12/05 19:55:01.398637, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:55:01.398659, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:55:01.398675, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:55:01.398691, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:55:01.398708, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.398723, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:55:01.398749, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:55:01.398765, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:55:01.398795, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:55:01.398811, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:55:01.398826, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:55:01.398840, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.398854, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.398869, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.398883, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:55:01.398898, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.398912, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.398927, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.398941, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.398955, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.398969, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM] [2010/12/05 19:55:01.399108, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:55:01.399131, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.399152, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:55:01.399168, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:55:01.399184, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.399200, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:55:01.399219, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:55:01.399243, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:55:01.399259, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.399277, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.399292, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.399307, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.399321, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.399335, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.399350, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.399364, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:55:01.399379, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.399393, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.399407, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.399422, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:55:01.399436, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.399464, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.399480, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.399494, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.399508, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:55:01.399524, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.399544, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.399566, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:55:01.399581, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:55:01.399597, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.399614, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:55:01.399630, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:55:01.399649, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:55:01.399673, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.399690, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:55:01.399705, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.399723, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.399738, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.399752, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.399767, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.399782, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.399796, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.399810, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:55:01.399825, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.399839, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.399854, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.399868, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:55:01.399883, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.399897, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.399912, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:55:01.399926, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.399940, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.399955, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.399969, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.399984, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.400020, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:55:01.400037, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.400058, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.400080, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:55:01.400095, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:55:01.400112, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:55:01.400134, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:55:01.400151, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:55:01.400167, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:55:01.400184, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:55:01.400201, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:55:01.400218, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:55:01.400234, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:55:01.400254, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:55:01.400279, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.400294, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2010/12/05 19:55:01.400310, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.400327, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.400342, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.400357, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.400372, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.400386, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.400400, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.400414, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.400429, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.400444, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.400458, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.400472, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS] [2010/12/05 19:55:01.400488, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.400502, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.400517, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS] [2010/12/05 19:55:01.400532, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.400550, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.400564, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.400579, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [] [2010/12/05 19:55:01.400606, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.400621, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.400636, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.400651, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/05 19:55:01.400666, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.400680, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.400694, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:55:01.400710, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:55:01.400732, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.400753, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:55:01.400769, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:55:01.400785, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:55:01.400801, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:55:01.400821, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:55:01.400850, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.400866, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/05 19:55:01.400882, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:55:01.400901, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/05 19:55:01.400916, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/05 19:55:01.400931, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/05 19:55:01.400946, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:55:01.400961, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:55:01.400976, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:55:01.400991, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS/Security] [2010/12/05 19:55:01.401006, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:55:01.401020, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:55:01.401035, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:55:01.401049, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS/Security] [2010/12/05 19:55:01.401064, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:55:01.401079, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:55:01.401094, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS/Security] [2010/12/05 19:55:01.401109, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:55:01.401136, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:55:01.401151, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:55:01.401165, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [Security] [2010/12/05 19:55:01.401180, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:55:01.401194, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:55:01.401209, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:55:01.401231, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/05 19:55:01.401245, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:55:01.401259, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:55:01.401273, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f31de2673a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/05 19:55:01.401290, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/05 19:55:01.401320, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.401343, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/05 19:55:01.401359, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/05 19:55:01.401379, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.401405, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:55:01.401421, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:55:01.401443, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/05 19:55:01.401466, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:55:01.401483, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:55:01.401498, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/05 19:55:01.401513, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/05 19:55:01.401528, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/05 19:55:01.401550, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:55:01.401567, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (3) [2010/12/05 19:55:01.401603, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:55:01.401912, 10] printing/nt_printing.c:707(update_c_setprinter) update_c_setprinter: c_setprinter = 0 [2010/12/05 19:55:01.401951, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.401970, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.401985, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.402001, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.402015, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.402046, 6] passdb/pdb_interface.c:285(pdb_getsampwsid) pdb_getsampwsid: Building guest account [2010/12/05 19:55:01.403391, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:55:01.403461, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:55:01.403478, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:55:01.403494, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:55:01.403509, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:55:01.403525, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 14 -> now DEFAULT [2010/12/05 19:55:01.403542, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:55:01.403561, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 18 -> now DEFAULT [2010/12/05 19:55:01.403575, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:55:01.403608, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.403662, 10] lib/system_smbd.c:122(sys_getgrouplist) sys_getgrouplist: user [nobody] [2010/12/05 19:55:01.404987, 10] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/GID2SID/65533 couldn't be found [2010/12/05 19:55:01.406254, 5] passdb/lookup_sid.c:1395(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 65533 [2010/12/05 19:55:01.406282, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.406300, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.406316, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.406332, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.406347, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.406415, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.406433, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid) LEGACY: gid 65533 -> sid S-1-22-2-65533 [2010/12/05 19:55:01.406460, 10] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/GID2SID/65534 couldn't be found [2010/12/05 19:55:01.407544, 5] passdb/lookup_sid.c:1395(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 65534 [2010/12/05 19:55:01.407570, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.407586, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.407602, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.407617, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.407632, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.407686, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.407704, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid) LEGACY: gid 65534 -> sid S-1-22-2-65534 [2010/12/05 19:55:01.407724, 5] auth/auth_util.c:649(make_server_info_sam) make_server_info_sam: made server info for user nobody -> nobody [2010/12/05 19:55:01.407745, 10] auth/token_util.c:356(create_local_nt_token) Create local NT token for S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:55:01.407779, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-544, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:55:01.407809, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.407847, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.407862, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.407877, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.407890, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.407948, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.407964, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-544 [2010/12/05 19:55:01.407981, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.407997, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408011, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408026, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.408040, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.408071, 3] auth/token_util.c:436(create_local_nt_token) Failed to fetch domain sid for WORKGROUP [2010/12/05 19:55:01.408091, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408116, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-545, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:55:01.408148, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408164, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408178, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408193, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.408206, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.408260, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408277, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-545 [2010/12/05 19:55:01.408293, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408307, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408322, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408336, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.408351, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.408377, 3] auth/token_util.c:467(create_local_nt_token) Failed to fetch domain sid for WORKGROUP [2010/12/05 19:55:01.408395, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408411, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408426, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408441, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408455, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.408469, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.408676, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408703, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-779886165-838294741-719422925-501] [2010/12/05 19:55:01.408738, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-65533] [2010/12/05 19:55:01.408760, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:55:01.408791, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/12/05 19:55:01.408812, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2010/12/05 19:55:01.408832, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-65534] [2010/12/05 19:55:01.408858, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-1-0, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:55:01.408884, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408900, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.408914, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.408929, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.408943, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.408998, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.409015, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-1-0 [2010/12/05 19:55:01.409030, 10] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-1-0 to gid, ignoring it [2010/12/05 19:55:01.409055, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-2, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:55:01.409081, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.409096, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.409110, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.409125, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.409139, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.409189, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.409206, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-2 [2010/12/05 19:55:01.409222, 10] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-5-2 to gid, ignoring it [2010/12/05 19:55:01.409247, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-546, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:55:01.409272, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.409288, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:55:01.409302, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:55:01.409317, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:55:01.409331, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:55:01.409388, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:55:01.409405, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-546 [2010/12/05 19:55:01.409421, 10] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-5-32-546 to gid, ignoring it [2010/12/05 19:55:01.409451, 10] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-779886165-838294741-719422925-501 contains 7 SIDs SID[ 0]: S-1-5-21-779886165-838294741-719422925-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:55:01.409520, 10] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/05 19:55:01.409599, 3] printing/printing.c:1412(start_background_queue) start_background_queue: Starting background LPQ thread [2010/12/05 19:55:01.410349, 10] lib/util_sock.c:888(open_socket_in) bind succeeded on port 445 [2010/12/05 19:55:01.410411, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:55:01.410534, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:55:01.410678, 10] lib/util_sock.c:888(open_socket_in) bind succeeded on port 139 [2010/12/05 19:55:01.410714, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:55:01.410810, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:55:01.410956, 2] lib/util_sock.c:875(open_socket_in) bind failed on port 445 socket_addr = 0.0.0.0. [2010/12/05 19:55:01.411103, 5] printing/printing.c:1434(start_background_queue) Error = Die Adresse wird bereits verwendet start_background_queue: background LPQ thread started [2010/12/05 19:55:01.411237, 0] smbd/server.c:500(smbd_open_one_socket) smbd_open_once_socket: open_socket_in: Die Adresse wird bereits verwendet [2010/12/05 19:55:01.411405, 2] lib/util_sock.c:875(open_socket_in) bind failed on port 139 socket_addr = 0.0.0.0. Error = Die Adresse wird bereits verwendet [2010/12/05 19:55:01.411431, 5] smbd/connection.c:142(claim_connection) claiming [smbd lpq backend] [2010/12/05 19:55:01.411441, 0] smbd/server.c:500(smbd_open_one_socket) smbd_open_once_socket: open_socket_in: Die Adresse wird bereits verwendet [2010/12/05 19:55:01.411513, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/12/05 19:55:01.411531, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 322E0000FFFFFFFFFFFFFFFF736D6264206C7071206261636B656E64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:55:01.411609, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 0C2E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:55:01.411637, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f31de32f020 [2010/12/05 19:55:01.411656, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f31de32f3a0 [2010/12/05 19:55:01.411689, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) [2010/12/05 19:55:01.411702, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 322E0000FFFFFFFFFFFFFFFF736D6264206C7071206261636B656E64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 Unlocking key 0C2E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:55:01.411795, 5] printing/printing.c:1468(start_background_queue) start_background_queue: background LPQ thread waiting for messages [2010/12/05 19:55:01.411803, 5] lib/messages.c:297(messaging_register) Overriding messaging pointer for type 1 - private_data=(nil) [2010/12/05 19:55:01.412325, 2] smbd/server.c:721(smbd_parent_loop) waiting for connections