The Samba-Bugzilla – Attachment 7185 Details for
Bug 8414
Cannot delete/rename files on samba 3.6.0 shares
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
smbd_361orig_delete.log
smbd_361orig_delete.log (text/x-log), 1.77 MB, created by
Dmitry
on 2011-12-15 07:53:17 UTC
(
hide
)
Description:
smbd_361orig_delete.log
Filename:
MIME Type:
Creator:
Dmitry
Created:
2011-12-15 07:53:17 UTC
Size:
1.77 MB
patch
obsolete
>[2011/12/15 11:45:27.463680, 3] param/loadparm.c:9579(lp_load_ex) > lp_load_ex: refreshing parameters >[2011/12/15 11:45:27.463832, 3] param/loadparm.c:5196(init_globals) > Initialising global parameters >[2011/12/15 11:45:27.463929, 2] param/loadparm.c:4989(max_open_files) > rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) >[2011/12/15 11:45:27.464096, 3] ../lib/util/params.c:550(pm_process) > params.c:pm_process() - Processing configuration file "/opt/samba/smb.conf" >[2011/12/15 11:45:27.464192, 3] param/loadparm.c:8317(do_section) > Processing section "[global]" > doing parameter pid directory = /opt/samba/run > doing parameter lock directory = /opt/samba/cache > doing parameter private dir = /opt/samba/cache > doing parameter log file = /opt/samba/smbd.log > doing parameter log level = 10 >[2011/12/15 11:45:27.464557, 5] ../lib/util/debug.c:330(debug_dump_status) > INFO: Current debug levels: > all: 10 > tdb: 10 > printdrivers: 10 > lanman: 10 > smb: 10 > rpc_parse: 10 > rpc_srv: 10 > rpc_cli: 10 > passdb: 10 > sam: 10 > auth: 10 > winbind: 10 > vfs: 10 > idmap: 10 > quota: 10 > acls: 10 > locking: 10 > msdfs: 10 > dmapi: 10 > registry: 10 > doing parameter workgroup = TEST > doing parameter security = share > doing parameter show add printer wizard = no > doing parameter max log size = 10240 > doing parameter bind interfaces only = true > doing parameter interfaces = eth1 >[2011/12/15 11:45:27.465434, 2] param/loadparm.c:8334(do_section) > Processing section "[homes]" >[2011/12/15 11:45:27.465604, 8] param/loadparm.c:6487(add_a_service) > add_a_service: Creating snum = 0 for homes >[2011/12/15 11:45:27.465685, 10] param/loadparm.c:6525(hash_a_service) > hash_a_service: creating servicehash >[2011/12/15 11:45:27.465763, 10] param/loadparm.c:6534(hash_a_service) > hash_a_service: hashing index 0 for service name homes > doing parameter browseable = no > doing parameter printable = no >[2011/12/15 11:45:27.465995, 2] param/loadparm.c:8334(do_section) > Processing section "[public]" >[2011/12/15 11:45:27.466126, 8] param/loadparm.c:6487(add_a_service) > add_a_service: Creating snum = 1 for public >[2011/12/15 11:45:27.466216, 10] param/loadparm.c:6534(hash_a_service) > hash_a_service: hashing index 1 for service name public > doing parameter path = /mnt/public > doing parameter comment = "" > doing parameter read only = no > doing parameter guest ok = yes > doing parameter follow symlinks = no > doing parameter writable = yes >[2011/12/15 11:45:27.466599, 4] param/loadparm.c:9615(lp_load_ex) > pm_process() returned Yes >[2011/12/15 11:45:27.466738, 8] param/loadparm.c:6487(add_a_service) > add_a_service: Creating snum = 2 for IPC$ >[2011/12/15 11:45:27.466813, 10] param/loadparm.c:6534(hash_a_service) > hash_a_service: hashing index 2 for service name IPC$ >[2011/12/15 11:45:27.466903, 3] param/loadparm.c:6637(lp_add_ipc) > adding IPC service >[2011/12/15 11:45:27.466975, 10] param/loadparm_server_role.c:101(set_server_role) > set_server_role: role = ROLE_STANDALONE >[2011/12/15 11:45:27.467046, 1] param/loadparm.c:9673(lp_load_ex) > WARNING: The security=share option is deprecated >[2011/12/15 11:45:27.467133, 5] ../lib/util/charset/codepoints.c:235(map_locale) > Substituting charset 'UTF-8' for LOCALE >[2011/12/15 11:45:27.467232, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:45:27.467570, 2] lib/interface.c:341(add_interface) > added interface eth1 ip=194.87.37.17 bcast=194.87.37.19 netmask=255.255.255.252 >[2011/12/15 11:45:27.467710, 3] smbd/server.c:1083(main) > loaded services >[2011/12/15 11:45:27.467802, 5] lib/util.c:242(init_names) > Netbios name list:- > my_netbios_names[0]="ROCK" >[2011/12/15 11:45:27.468000, 0] smbd/server.c:1104(main) > standard input is not a socket, assuming -D option >[2011/12/15 11:45:27.468224, 8] ../lib/util/util.c:263(fcntl_lock) > fcntl_lock 10 13 0 1 1 >[2011/12/15 11:45:27.468334, 8] ../lib/util/util.c:298(fcntl_lock) > fcntl_lock: Lock call successful >[2011/12/15 11:45:27.468742, 5] passdb/pdb_interface.c:71(smb_register_passdb) > Attempting to register passdb backend smbpasswd >[2011/12/15 11:45:27.468846, 5] passdb/pdb_interface.c:84(smb_register_passdb) > Successfully added passdb backend 'smbpasswd' >[2011/12/15 11:45:27.468931, 5] passdb/pdb_interface.c:71(smb_register_passdb) > Attempting to register passdb backend tdbsam >[2011/12/15 11:45:27.469015, 5] passdb/pdb_interface.c:84(smb_register_passdb) > Successfully added passdb backend 'tdbsam' >[2011/12/15 11:45:27.469103, 5] passdb/pdb_interface.c:71(smb_register_passdb) > Attempting to register passdb backend wbc_sam >[2011/12/15 11:45:27.469190, 5] passdb/pdb_interface.c:84(smb_register_passdb) > Successfully added passdb backend 'wbc_sam' >[2011/12/15 11:45:27.469268, 5] passdb/pdb_interface.c:141(make_pdb_method_name) > Attempting to find a passdb backend to match tdbsam (tdbsam) >[2011/12/15 11:45:27.469353, 5] passdb/pdb_interface.c:162(make_pdb_method_name) > Found pdb backend tdbsam >[2011/12/15 11:45:27.469468, 5] passdb/pdb_interface.c:173(make_pdb_method_name) > pdb backend tdbsam has a valid init >[2011/12/15 11:45:27.471383, 10] registry/reg_backend_db.c:526(regdb_init) > regdb_init: registry db openend. refcount reset (1) >[2011/12/15 11:45:27.471518, 10] registry/reg_cachehook.c:70(reghook_cache_init) > reghook_cache_init: new tree with default ops 0xc62440 for key [] >[2011/12/15 11:45:27.472089, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2011/12/15 11:45:27.472228, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Samba Printer Port], len: 2 >[2011/12/15 11:45:27.472318, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2011/12/15 11:45:27.472435, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DefaultSpoolDirectory], len: 70 >[2011/12/15 11:45:27.472521, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:45:27.472642, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 20 >[2011/12/15 11:45:27.472718, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:45:27.472800, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:45:27.472927, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 20 >[2011/12/15 11:45:27.473018, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:45:27.473112, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc62520 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] >[2011/12/15 11:45:27.473202, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.473294, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree >[2011/12/15 11:45:27.473385, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.473515, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc62440 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2011/12/15 11:45:27.473600, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.473692, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree >[2011/12/15 11:45:27.473775, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.473858, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc62440 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2011/12/15 11:45:27.473970, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.474057, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree >[2011/12/15 11:45:27.474145, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.474234, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc62560 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] >[2011/12/15 11:45:27.474323, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.474415, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree >[2011/12/15 11:45:27.474500, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.474593, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc624e0 for key [\HKLM\SOFTWARE\Samba\smbconf] >[2011/12/15 11:45:27.474682, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.474768, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree >[2011/12/15 11:45:27.474841, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.474915, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc625a0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] >[2011/12/15 11:45:27.474996, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.475084, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree >[2011/12/15 11:45:27.475176, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.475272, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc625e0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] >[2011/12/15 11:45:27.475365, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.475474, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree >[2011/12/15 11:45:27.475561, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.475651, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc62620 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] >[2011/12/15 11:45:27.475738, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.475831, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree >[2011/12/15 11:45:27.475920, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.476009, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc62660 for key [\HKPT] >[2011/12/15 11:45:27.476098, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.476186, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKPT] to tree >[2011/12/15 11:45:27.476267, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.476355, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc626a0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] >[2011/12/15 11:45:27.476438, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.476522, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree >[2011/12/15 11:45:27.476601, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.476711, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0xc626e0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] >[2011/12/15 11:45:27.476804, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:45:27.476891, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree >[2011/12/15 11:45:27.476974, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:45:27.477054, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (1->0) >[2011/12/15 11:45:27.478019, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user root >[2011/12/15 11:45:27.478111, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is root >[2011/12/15 11:45:27.478241, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [root]! >[2011/12/15 11:45:27.478351, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\root => domain=[Unix User], name=[root] >[2011/12/15 11:45:27.478430, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:45:27.478572, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user root >[2011/12/15 11:45:27.478653, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is root >[2011/12/15 11:45:27.478737, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [root]! >[2011/12/15 11:45:27.478835, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username root, was >[2011/12/15 11:45:27.478924, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name root, was >[2011/12/15 11:45:27.479002, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:45:27.479088, 4] lib/substitute.c:522(automount_server) > Home server: rock >[2011/12/15 11:45:27.479178, 10] passdb/pdb_get_set.c:660(pdb_set_profile_path) > pdb_set_profile_path: setting profile path \\rock\root\profile, was >[2011/12/15 11:45:27.479261, 4] lib/substitute.c:522(automount_server) > Home server: rock >[2011/12/15 11:45:27.479345, 10] passdb/pdb_get_set.c:707(pdb_set_homedir) > pdb_set_homedir: setting home dir \\rock\root, was >[2011/12/15 11:45:27.479426, 10] passdb/pdb_get_set.c:683(pdb_set_dir_drive) > pdb_set_dir_drive: setting dir drive , was NULL >[2011/12/15 11:45:27.479518, 10] passdb/pdb_get_set.c:637(pdb_set_logon_script) > pdb_set_logon_script: setting logon script , was >[2011/12/15 11:45:27.479609, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-1000 >[2011/12/15 11:45:27.479704, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-1000 from rid 1000 >[2011/12/15 11:45:27.479811, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username root, was root >[2011/12/15 11:45:27.479886, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-22-1-0 >[2011/12/15 11:45:27.480000, 5] lib/gencache.c:68(gencache_init) > Opening cache file at /opt/samba/cache/gencache.tdb >[2011/12/15 11:45:27.480192, 5] lib/gencache.c:111(gencache_init) > Opening cache file at /opt/samba/cache/gencache_notrans.tdb >[2011/12/15 11:45:27.480471, 5] passdb/lookup_sid.c:1384(gid_to_sid) > gid_to_sid: winbind failed to find a sid for gid 0 >[2011/12/15 11:45:27.480566, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.480654, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.480736, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.480817, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.480899, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.481300, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.481398, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid) > LEGACY: gid 0 -> sid S-1-22-2-0 >[2011/12/15 11:45:27.481564, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for root >[2011/12/15 11:45:27.481662, 10] auth/server_info.c:354(samu_to_SamInfo3) > Unix User found in struct samu. Rid marked as special and sid (S-1-22-1-0) saved as extra sid >[2011/12/15 11:45:27.481765, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user root >[2011/12/15 11:45:27.481850, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is root >[2011/12/15 11:45:27.481936, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [root]! >[2011/12/15 11:45:27.482093, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [root] >[2011/12/15 11:45:27.482511, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: ROCK\root => domain=[ROCK], name=[root] >[2011/12/15 11:45:27.482610, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:45:27.482700, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.482787, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.482870, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.482952, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.483031, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.483323, 4] passdb/pdb_tdb.c:523(tdbsam_open) > tdbsam_open: successfully opened /opt/samba/cache/passdb.tdb >[2011/12/15 11:45:27.483419, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_root >[2011/12/15 11:45:27.483540, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.483625, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.483710, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.483791, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.483871, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.483951, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.484102, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.484189, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\root => domain=[Unix User], name=[root] >[2011/12/15 11:45:27.484266, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:45:27.484355, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user root >[2011/12/15 11:45:27.484425, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is root >[2011/12/15 11:45:27.484499, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [root]! >[2011/12/15 11:45:27.484585, 10] passdb/lookup_sid.c:1527(sid_to_uid) > sid S-1-22-1-0 -> uid 0 >[2011/12/15 11:45:27.484733, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [root] >[2011/12/15 11:45:27.484916, 10] auth/token_util.c:339(create_local_nt_token) > Create local NT token for S-1-22-1-0 >[2011/12/15 11:45:27.485060, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-544 >[2011/12/15 11:45:27.485138, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.485243, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.485312, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.485383, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.485505, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.485658, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.485736, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-544 >[2011/12/15 11:45:27.485811, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.485883, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.485953, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.486023, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.486090, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.486211, 3] auth/token_util.c:438(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:45:27.486293, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.486400, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-545 >[2011/12/15 11:45:27.486484, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.486565, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.486644, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.486719, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.486791, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.486925, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.486997, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-545 >[2011/12/15 11:45:27.487070, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.487141, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.487212, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.487289, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.487363, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.487488, 3] auth/token_util.c:469(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:45:27.487571, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.487645, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.487717, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.487787, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.487857, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.487925, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.488138, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.488359, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-1-0] >[2011/12/15 11:45:27.488451, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-2-0] >[2011/12/15 11:45:27.488536, 5] lib/privileges.c:175(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2011/12/15 11:45:27.488643, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2011/12/15 11:45:27.488725, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-11] >[2011/12/15 11:45:27.488948, 10] passdb/lookup_sid.c:1468(sids_to_unix_ids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2011/12/15 11:45:27.489038, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.489117, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.489188, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.489258, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.489327, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.489472, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.489547, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:45:27.489620, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:45:27.489699, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.489779, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.489853, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.489928, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.489998, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.490129, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.490202, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:45:27.490274, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:45:27.490347, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.490424, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.490499, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.490577, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.490650, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.490785, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.490858, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-11 >[2011/12/15 11:45:27.490945, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-11 >[2011/12/15 11:45:27.491026, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2011/12/15 11:45:27.491102, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2011/12/15 11:45:27.491178, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-11 to gid, ignoring it >[2011/12/15 11:45:27.491259, 10] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-0 > SID[ 1]: S-1-22-2-0 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:27.491575, 10] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 1 supplementary groups > Group[ 0]: 0 >[2011/12/15 11:45:27.491723, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:27.491797, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:27.491935, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:27.492041, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user ROCK\nobody >[2011/12/15 11:45:27.492114, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is rock\nobody >[2011/12/15 11:45:27.492260, 5] lib/username.c:124(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as given is ROCK\nobody >[2011/12/15 11:45:27.492406, 5] lib/username.c:134(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as uppercase is ROCK\NOBODY >[2011/12/15 11:45:27.492551, 5] lib/username.c:143(Get_Pwnam_internals) > Checking combinations of 0 uppercase letters in rock\nobody >[2011/12/15 11:45:27.492626, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals didn't find user [ROCK\nobody]! >[2011/12/15 11:45:27.492701, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:27.492776, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:27.492852, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:27.492969, 5] passdb/lookup_sid.c:1384(gid_to_sid) > gid_to_sid: winbind failed to find a sid for gid 65534 >[2011/12/15 11:45:27.493045, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.493122, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.493197, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.493270, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.493342, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.493495, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.493572, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid) > LEGACY: gid 65534 -> sid S-1-22-2-65534 >[2011/12/15 11:45:27.493668, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for nobody >[2011/12/15 11:45:27.493746, 10] auth/token_util.c:223(create_local_nt_token_from_info3) > Create local NT token for nobody >[2011/12/15 11:45:27.493859, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-544 >[2011/12/15 11:45:27.493938, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.494015, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.494088, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.494162, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.494234, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.494369, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.494448, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-544 >[2011/12/15 11:45:27.494528, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.494629, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.494703, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.494777, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.494851, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.494976, 3] auth/token_util.c:438(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:45:27.495063, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.495182, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-545 >[2011/12/15 11:45:27.495268, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.495345, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.495419, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.495494, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.495566, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.495705, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.495782, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-545 >[2011/12/15 11:45:27.495859, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.495934, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.496007, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.496080, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.496152, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.496276, 3] auth/token_util.c:469(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:45:27.496358, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.496434, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.496510, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.496583, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.496656, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.496728, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.496983, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.497075, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-251563815-16092371-1107951384-501] >[2011/12/15 11:45:27.497170, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-251563815-16092371-1107951384-513] >[2011/12/15 11:45:27.497263, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-251563815-16092371-1107951384-546] >[2011/12/15 11:45:27.497354, 5] lib/privileges.c:175(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2011/12/15 11:45:27.497509, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2011/12/15 11:45:27.497622, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-32-546] >[2011/12/15 11:45:27.497957, 10] passdb/lookup_sid.c:1468(sids_to_unix_ids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2011/12/15 11:45:27.498035, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.498114, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.498187, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.498262, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.498334, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.498453, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 501. >[2011/12/15 11:45:27.498532, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.498607, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.498681, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.498754, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.498827, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.498941, 6] passdb/pdb_interface.c:399(pdb_getsampwsid) > pdb_getsampwsid: Building guest account >[2011/12/15 11:45:27.499016, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:27.499090, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:27.499171, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:27.499249, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was >[2011/12/15 11:45:27.499328, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name nobody, was >[2011/12/15 11:45:27.499405, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:45:27.499485, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-501 >[2011/12/15 11:45:27.499565, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-501 from rid 501 >[2011/12/15 11:45:27.499685, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.499766, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:27.499839, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:27.499915, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:27.500001, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.500076, 5] passdb/lookup_sid.c:1269(legacy_sid_to_gid) > LEGACY: sid S-1-5-21-251563815-16092371-1107951384-501 is a User, expected a group >[2011/12/15 11:45:27.500158, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.500235, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.500308, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.500381, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.500453, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.500586, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 501. >[2011/12/15 11:45:27.500664, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.500739, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.500812, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.500885, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.500958, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.501069, 6] passdb/pdb_interface.c:399(pdb_getsampwsid) > pdb_getsampwsid: Building guest account >[2011/12/15 11:45:27.501142, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:27.501215, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:27.501290, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:27.501363, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was >[2011/12/15 11:45:27.501438, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name nobody, was >[2011/12/15 11:45:27.501526, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:45:27.501602, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-501 >[2011/12/15 11:45:27.501681, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-501 from rid 501 >[2011/12/15 11:45:27.501799, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.501878, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:27.501952, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:27.502028, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:27.502113, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.502190, 10] passdb/lookup_sid.c:1223(legacy_sid_to_uid) > LEGACY: sid S-1-5-21-251563815-16092371-1107951384-501 -> uid 65534 >[2011/12/15 11:45:27.502275, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.502352, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.502426, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.502503, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.502573, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.502680, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 513. >[2011/12/15 11:45:27.502752, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.502825, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.502902, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.502982, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.503062, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.503207, 5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. >[2011/12/15 11:45:27.503346, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.503438, 5] passdb/pdb_interface.c:1666(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2011/12/15 11:45:27.503533, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.503614, 10] passdb/lookup_sid.c:1280(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-21-251563815-16092371-1107951384-513 >[2011/12/15 11:45:27.503698, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.503777, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.503851, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.503921, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.503990, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.504100, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 513. >[2011/12/15 11:45:27.504174, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.504245, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.504316, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.504390, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.504463, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.504592, 5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. >[2011/12/15 11:45:27.504697, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.504770, 5] passdb/pdb_interface.c:1666(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2011/12/15 11:45:27.504848, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.504920, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-21-251563815-16092371-1107951384-513 >[2011/12/15 11:45:27.504998, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.505070, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.505140, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.505214, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.505288, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.505404, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 546. >[2011/12/15 11:45:27.505495, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.505567, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.505636, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.505705, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.505773, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.505892, 5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 546 by key RID_00000222. >[2011/12/15 11:45:27.506002, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.506119, 5] passdb/pdb_interface.c:1666(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2011/12/15 11:45:27.506204, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.506276, 10] passdb/lookup_sid.c:1280(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-21-251563815-16092371-1107951384-546 >[2011/12/15 11:45:27.506352, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.506425, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.506500, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.506583, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.506662, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.506771, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 546. >[2011/12/15 11:45:27.506844, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.506921, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.506998, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:45:27.507072, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.507145, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.507266, 5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 546 by key RID_00000222. >[2011/12/15 11:45:27.507368, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.507441, 5] passdb/pdb_interface.c:1666(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2011/12/15 11:45:27.507519, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.507591, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-21-251563815-16092371-1107951384-546 >[2011/12/15 11:45:27.507675, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.507753, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.507827, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.507902, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.507971, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.508101, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.508173, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:45:27.508245, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:45:27.508319, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.508391, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.508462, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.508538, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.508609, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.508745, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.508843, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:45:27.508916, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:45:27.508990, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.509061, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.509131, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.509207, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.509280, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.509419, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.509596, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:45:27.509670, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:45:27.509742, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-21-251563815-16092371-1107951384-513 to gid, ignoring it >[2011/12/15 11:45:27.509817, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-21-251563815-16092371-1107951384-546 to gid, ignoring it >[2011/12/15 11:45:27.509893, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2011/12/15 11:45:27.509965, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2011/12/15 11:45:27.510041, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-32-546 to gid, ignoring it >[2011/12/15 11:45:27.510134, 10] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-251563815-16092371-1107951384-501 > SID[ 1]: S-1-5-21-251563815-16092371-1107951384-513 > SID[ 2]: S-1-5-21-251563815-16092371-1107951384-546 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-32-546 > SID[ 6]: S-1-22-1-65534 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:27.510486, 10] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 0 supplementary groups >[2011/12/15 11:45:27.510775, 3] rpc_server/svcctl/srv_svcctl_reg.c:569(svcctl_init_winreg) > Initialise the svcctl registry keys if needed. >[2011/12/15 11:45:27.510861, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.510938, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.511009, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:27.511079, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:27.511147, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:27.511370, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:27.511454, 10] registry/reg_backend_db.c:602(regdb_open) > regdb_open: registry db opened. refcount reset (1) >[2011/12/15 11:45:27.511559, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \winreg >[2011/12/15 11:45:27.511689, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \winreg >[2011/12/15 11:45:27.511767, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg >[2011/12/15 11:45:27.511850, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \winreg (pipes_open=0) >[2011/12/15 11:45:27.511974, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : NULL > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:45:27.512513, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2011/12/15 11:45:27.512596, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (1->2) >[2011/12/15 11:45:27.512673, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2011/12/15 11:45:27.512744, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2011/12/15 11:45:27.512814, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.512882, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM] >[2011/12/15 11:45:27.512997, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.513185, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > result : WERR_OK >[2011/12/15 11:45:27.513634, 5] ../lib/util/charset/codepoints.c:235(map_locale) > Substituting charset 'UTF-8' for LOCALE >[2011/12/15 11:45:27.513723, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > keyname: struct winreg_String > name_len : 0x0044 (68) > name_size : 0x0044 (68) > name : * > name : 'SYSTEM\CurrentControlSet\Services' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:45:27.514616, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.514805, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.514882, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (2->3) >[2011/12/15 11:45:27.514961, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.515065, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.515143, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.515219, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.515339, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.515421, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.515501, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.515577, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.515656, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.515733, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.515847, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.515927, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.516001, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.516084, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.516157, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.516233, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.516305, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.516432, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.516512, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.516685, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > result : WERR_OK >[2011/12/15 11:45:27.517027, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > in: struct winreg_QueryInfoKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL >[2011/12/15 11:45:27.517533, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.517766, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0xc62440) >[2011/12/15 11:45:27.517867, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.517965, 10] registry/reg_backend_db.c:1871(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.518071, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > out: struct winreg_QueryInfoKey > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL > num_subkeys : * > num_subkeys : 0x00000007 (7) > max_subkeylen : * > max_subkeylen : 0x0000001c (28) > max_classlen : * > max_classlen : 0x00000000 (0) > num_values : * > num_values : 0x00000000 (0) > max_valnamelen : * > max_valnamelen : 0x00000002 (2) > max_valbufsize : * > max_valbufsize : 0x00000000 (0) > secdescsize : * > secdescsize : 0x00000078 (120) > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.518985, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > enum_index : 0x00000000 (0) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:45:27.519766, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.519945, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.520077, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x001a (26) > size : 0x001e (30) > name : * > name : 'LanmanServer' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.520778, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > enum_index : 0x00000001 (1) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:45:27.522045, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.522454, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.522806, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0012 (18) > size : 0x001e (30) > name : * > name : 'Eventlog' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.524301, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > enum_index : 0x00000002 (2) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:45:27.526165, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.526582, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.526875, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x000c (12) > size : 0x001e (30) > name : * > name : 'Tcpip' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.527926, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > enum_index : 0x00000003 (3) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:45:27.528688, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.528859, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.528996, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0012 (18) > size : 0x001e (30) > name : * > name : 'Netlogon' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.529724, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > enum_index : 0x00000004 (4) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:45:27.530516, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.530704, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.530850, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0010 (16) > size : 0x001e (30) > name : * > name : 'Spooler' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.531523, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > enum_index : 0x00000005 (5) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:45:27.532275, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.532462, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.532601, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x001e (30) > size : 0x001e (30) > name : * > name : 'RemoteRegistry' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.533307, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 > enum_index : 0x00000006 (6) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:45:27.534086, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.534273, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.534412, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x000a (10) > size : 0x001e (30) > name : * > name : 'WINS' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.535137, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0054 (84) > name_size : 0x0054 (84) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Spooler' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2011/12/15 11:45:27.536334, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.536501, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' >[2011/12/15 11:45:27.536582, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.536658, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.536737, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.536814, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.536892, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.536966, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.537072, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.537148, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.537228, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.537301, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.537376, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.537462, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.537569, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.537648, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.537722, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.537803, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.537876, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.537952, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.538023, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.538149, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.538251, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Spooler] >[2011/12/15 11:45:27.538327, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.538408, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:45:27.538483, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:45:27.538556, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.538625, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:45:27.538723, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.538799, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.538962, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:45:27.539375, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.540058, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.540226, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] >[2011/12/15 11:45:27.540303, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0xc62440) >[2011/12/15 11:45:27.540377, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:45:27.540487, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Start], len: 4 >[2011/12/15 11:45:27.540565, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Type], len: 4 >[2011/12/15 11:45:27.540640, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:45:27.540714, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ObjectName], len: 24 >[2011/12/15 11:45:27.540824, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 28 >[2011/12/15 11:45:27.540899, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ImagePath], len: 72 >[2011/12/15 11:45:27.540974, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Description], len: 106 >[2011/12/15 11:45:27.541051, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.541260, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.541958, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.542139, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] >[2011/12/15 11:45:27.542222, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.542419, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.543136, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.543304, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] >[2011/12/15 11:45:27.543383, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.543623, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2011/12/15 11:45:27.545103, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.545273, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] >[2011/12/15 11:45:27.545361, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.545581, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(28) > [0] : 0x50 (80) > [1] : 0x00 (0) > [2] : 0x72 (114) > [3] : 0x00 (0) > [4] : 0x69 (105) > [5] : 0x00 (0) > [6] : 0x6e (110) > [7] : 0x00 (0) > [8] : 0x74 (116) > [9] : 0x00 (0) > [10] : 0x20 (32) > [11] : 0x00 (0) > [12] : 0x53 (83) > [13] : 0x00 (0) > [14] : 0x70 (112) > [15] : 0x00 (0) > [16] : 0x6f (111) > [17] : 0x00 (0) > [18] : 0x6f (111) > [19] : 0x00 (0) > [20] : 0x6c (108) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x72 (114) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > size : 0x0000001c (28) >[2011/12/15 11:45:27.547119, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.547301, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] >[2011/12/15 11:45:27.547386, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.547699, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(72) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x68 (104) > [3] : 0x00 (0) > [4] : 0x6f (111) > [5] : 0x00 (0) > [6] : 0x6d (109) > [7] : 0x00 (0) > [8] : 0x65 (101) > [9] : 0x00 (0) > [10] : 0x2f (47) > [11] : 0x00 (0) > [12] : 0x64 (100) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x2f (47) > [17] : 0x00 (0) > [18] : 0x62 (98) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x6e (110) > [23] : 0x00 (0) > [24] : 0x2f (47) > [25] : 0x00 (0) > [26] : 0x73 (115) > [27] : 0x00 (0) > [28] : 0x61 (97) > [29] : 0x00 (0) > [30] : 0x6d (109) > [31] : 0x00 (0) > [32] : 0x62 (98) > [33] : 0x00 (0) > [34] : 0x61 (97) > [35] : 0x00 (0) > [36] : 0x33 (51) > [37] : 0x00 (0) > [38] : 0x2f (47) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x62 (98) > [45] : 0x00 (0) > [46] : 0x2f (47) > [47] : 0x00 (0) > [48] : 0x73 (115) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x63 (99) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x74 (116) > [57] : 0x00 (0) > [58] : 0x6c (108) > [59] : 0x00 (0) > [60] : 0x2f (47) > [61] : 0x00 (0) > [62] : 0x73 (115) > [63] : 0x00 (0) > [64] : 0x6d (109) > [65] : 0x00 (0) > [66] : 0x62 (98) > [67] : 0x00 (0) > [68] : 0x64 (100) > [69] : 0x00 (0) > [70] : 0x00 (0) > [71] : 0x00 (0) > size : 0x00000048 (72) >[2011/12/15 11:45:27.550901, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.551087, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] >[2011/12/15 11:45:27.551172, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.551375, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(106) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x66 (102) > [35] : 0x00 (0) > [36] : 0x6f (111) > [37] : 0x00 (0) > [38] : 0x72 (114) > [39] : 0x00 (0) > [40] : 0x20 (32) > [41] : 0x00 (0) > [42] : 0x73 (115) > [43] : 0x00 (0) > [44] : 0x70 (112) > [45] : 0x00 (0) > [46] : 0x6f (111) > [47] : 0x00 (0) > [48] : 0x6f (111) > [49] : 0x00 (0) > [50] : 0x6c (108) > [51] : 0x00 (0) > [52] : 0x69 (105) > [53] : 0x00 (0) > [54] : 0x6e (110) > [55] : 0x00 (0) > [56] : 0x67 (103) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x66 (102) > [61] : 0x00 (0) > [62] : 0x69 (105) > [63] : 0x00 (0) > [64] : 0x6c (108) > [65] : 0x00 (0) > [66] : 0x65 (101) > [67] : 0x00 (0) > [68] : 0x73 (115) > [69] : 0x00 (0) > [70] : 0x20 (32) > [71] : 0x00 (0) > [72] : 0x74 (116) > [73] : 0x00 (0) > [74] : 0x6f (111) > [75] : 0x00 (0) > [76] : 0x20 (32) > [77] : 0x00 (0) > [78] : 0x70 (112) > [79] : 0x00 (0) > [80] : 0x72 (114) > [81] : 0x00 (0) > [82] : 0x69 (105) > [83] : 0x00 (0) > [84] : 0x6e (110) > [85] : 0x00 (0) > [86] : 0x74 (116) > [87] : 0x00 (0) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x64 (100) > [91] : 0x00 (0) > [92] : 0x65 (101) > [93] : 0x00 (0) > [94] : 0x76 (118) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x63 (99) > [99] : 0x00 (0) > [100] : 0x65 (101) > [101] : 0x00 (0) > [102] : 0x73 (115) > [103] : 0x00 (0) > [104] : 0x00 (0) > [105] : 0x00 (0) > size : 0x0000006a (106) >[2011/12/15 11:45:27.556035, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.556240, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] >[2011/12/15 11:45:27.556334, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.556571, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.556975, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.557151, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.557351, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.557433, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.557559, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.557937, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0066 (102) > name_size : 0x0066 (102) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2011/12/15 11:45:27.559216, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.559391, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' >[2011/12/15 11:45:27.559472, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.559550, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.559631, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.559706, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.559783, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.559856, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.559969, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.560046, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.560127, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.560231, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.560308, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.560379, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.560486, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.560565, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.560639, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.560720, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.560795, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.560870, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.560943, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.561071, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.561151, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Spooler] >[2011/12/15 11:45:27.561225, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.561308, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:45:27.561382, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:45:27.569521, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.569652, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:45:27.569773, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.569853, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2011/12/15 11:45:27.569930, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.570014, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:45:27.570091, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:45:27.570171, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.570250, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:45:27.570362, 10] registry/reg_backend_db.c:1630(regdb_fetch_keys_internal) > regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:45:27.570452, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.570542, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.570711, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-e94e-97a5dc110000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:45:27.572239, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2011/12/15 11:45:27.577095, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.577315, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] >[2011/12/15 11:45:27.577397, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0xc62440) >[2011/12/15 11:45:27.577495, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:45:27.577610, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Security], len: 120 >[2011/12/15 11:45:27.577794, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.577986, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.578240, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.578408, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.578574, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.578649, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.578724, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.579074, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0056 (86) > name_size : 0x0056 (86) > name : * > name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2011/12/15 11:45:27.580251, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.580440, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' >[2011/12/15 11:45:27.580519, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.580594, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.580675, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.580747, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.580822, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.580991, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.581090, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.581154, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.581219, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.581279, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.581341, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.581400, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.581499, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.581564, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.581625, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.581690, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.581750, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.581812, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.581870, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.581970, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.582034, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [NETLOGON] >[2011/12/15 11:45:27.582095, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.582160, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:45:27.582220, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:45:27.582281, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.582364, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:45:27.582453, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.582523, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.582651, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:45:27.582985, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.583543, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.583666, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] >[2011/12/15 11:45:27.583728, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0xc62440) >[2011/12/15 11:45:27.583791, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:45:27.583947, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Start], len: 4 >[2011/12/15 11:45:27.584013, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Type], len: 4 >[2011/12/15 11:45:27.584076, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:45:27.584139, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ObjectName], len: 24 >[2011/12/15 11:45:27.584203, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 20 >[2011/12/15 11:45:27.584266, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ImagePath], len: 72 >[2011/12/15 11:45:27.584329, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Description], len: 164 >[2011/12/15 11:45:27.584392, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.584553, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.585203, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.585375, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] >[2011/12/15 11:45:27.585468, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.585660, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.586369, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.586501, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] >[2011/12/15 11:45:27.586566, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.586717, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2011/12/15 11:45:27.587852, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.587976, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] >[2011/12/15 11:45:27.588039, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.588193, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(20) > [0] : 0x4e (78) > [1] : 0x00 (0) > [2] : 0x65 (101) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x20 (32) > [7] : 0x00 (0) > [8] : 0x4c (76) > [9] : 0x00 (0) > [10] : 0x6f (111) > [11] : 0x00 (0) > [12] : 0x67 (103) > [13] : 0x00 (0) > [14] : 0x6f (111) > [15] : 0x00 (0) > [16] : 0x6e (110) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > size : 0x00000014 (20) >[2011/12/15 11:45:27.589294, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.589419, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] >[2011/12/15 11:45:27.589492, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.589637, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(72) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x68 (104) > [3] : 0x00 (0) > [4] : 0x6f (111) > [5] : 0x00 (0) > [6] : 0x6d (109) > [7] : 0x00 (0) > [8] : 0x65 (101) > [9] : 0x00 (0) > [10] : 0x2f (47) > [11] : 0x00 (0) > [12] : 0x64 (100) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x2f (47) > [17] : 0x00 (0) > [18] : 0x62 (98) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x6e (110) > [23] : 0x00 (0) > [24] : 0x2f (47) > [25] : 0x00 (0) > [26] : 0x73 (115) > [27] : 0x00 (0) > [28] : 0x61 (97) > [29] : 0x00 (0) > [30] : 0x6d (109) > [31] : 0x00 (0) > [32] : 0x62 (98) > [33] : 0x00 (0) > [34] : 0x61 (97) > [35] : 0x00 (0) > [36] : 0x33 (51) > [37] : 0x00 (0) > [38] : 0x2f (47) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x62 (98) > [45] : 0x00 (0) > [46] : 0x2f (47) > [47] : 0x00 (0) > [48] : 0x73 (115) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x63 (99) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x74 (116) > [57] : 0x00 (0) > [58] : 0x6c (108) > [59] : 0x00 (0) > [60] : 0x2f (47) > [61] : 0x00 (0) > [62] : 0x73 (115) > [63] : 0x00 (0) > [64] : 0x6d (109) > [65] : 0x00 (0) > [66] : 0x62 (98) > [67] : 0x00 (0) > [68] : 0x64 (100) > [69] : 0x00 (0) > [70] : 0x00 (0) > [71] : 0x00 (0) > size : 0x00000048 (72) >[2011/12/15 11:45:27.592204, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.592329, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] >[2011/12/15 11:45:27.592393, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.592538, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(164) > [0] : 0x46 (70) > [1] : 0x00 (0) > [2] : 0x69 (105) > [3] : 0x00 (0) > [4] : 0x6c (108) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x20 (32) > [9] : 0x00 (0) > [10] : 0x73 (115) > [11] : 0x00 (0) > [12] : 0x65 (101) > [13] : 0x00 (0) > [14] : 0x72 (114) > [15] : 0x00 (0) > [16] : 0x76 (118) > [17] : 0x00 (0) > [18] : 0x69 (105) > [19] : 0x00 (0) > [20] : 0x63 (99) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x20 (32) > [25] : 0x00 (0) > [26] : 0x70 (112) > [27] : 0x00 (0) > [28] : 0x72 (114) > [29] : 0x00 (0) > [30] : 0x6f (111) > [31] : 0x00 (0) > [32] : 0x76 (118) > [33] : 0x00 (0) > [34] : 0x69 (105) > [35] : 0x00 (0) > [36] : 0x64 (100) > [37] : 0x00 (0) > [38] : 0x69 (105) > [39] : 0x00 (0) > [40] : 0x6e (110) > [41] : 0x00 (0) > [42] : 0x67 (103) > [43] : 0x00 (0) > [44] : 0x20 (32) > [45] : 0x00 (0) > [46] : 0x61 (97) > [47] : 0x00 (0) > [48] : 0x63 (99) > [49] : 0x00 (0) > [50] : 0x63 (99) > [51] : 0x00 (0) > [52] : 0x65 (101) > [53] : 0x00 (0) > [54] : 0x73 (115) > [55] : 0x00 (0) > [56] : 0x73 (115) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x74 (116) > [61] : 0x00 (0) > [62] : 0x6f (111) > [63] : 0x00 (0) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x70 (112) > [67] : 0x00 (0) > [68] : 0x6f (111) > [69] : 0x00 (0) > [70] : 0x6c (108) > [71] : 0x00 (0) > [72] : 0x69 (105) > [73] : 0x00 (0) > [74] : 0x63 (99) > [75] : 0x00 (0) > [76] : 0x79 (121) > [77] : 0x00 (0) > [78] : 0x20 (32) > [79] : 0x00 (0) > [80] : 0x61 (97) > [81] : 0x00 (0) > [82] : 0x6e (110) > [83] : 0x00 (0) > [84] : 0x64 (100) > [85] : 0x00 (0) > [86] : 0x20 (32) > [87] : 0x00 (0) > [88] : 0x70 (112) > [89] : 0x00 (0) > [90] : 0x72 (114) > [91] : 0x00 (0) > [92] : 0x6f (111) > [93] : 0x00 (0) > [94] : 0x66 (102) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x6c (108) > [99] : 0x00 (0) > [100] : 0x65 (101) > [101] : 0x00 (0) > [102] : 0x20 (32) > [103] : 0x00 (0) > [104] : 0x64 (100) > [105] : 0x00 (0) > [106] : 0x61 (97) > [107] : 0x00 (0) > [108] : 0x74 (116) > [109] : 0x00 (0) > [110] : 0x61 (97) > [111] : 0x00 (0) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x28 (40) > [115] : 0x00 (0) > [116] : 0x6e (110) > [117] : 0x00 (0) > [118] : 0x6f (111) > [119] : 0x00 (0) > [120] : 0x74 (116) > [121] : 0x00 (0) > [122] : 0x72 (114) > [123] : 0x00 (0) > [124] : 0x65 (101) > [125] : 0x00 (0) > [126] : 0x6d (109) > [127] : 0x00 (0) > [128] : 0x6f (111) > [129] : 0x00 (0) > [130] : 0x74 (116) > [131] : 0x00 (0) > [132] : 0x65 (101) > [133] : 0x00 (0) > [134] : 0x6c (108) > [135] : 0x00 (0) > [136] : 0x79 (121) > [137] : 0x00 (0) > [138] : 0x20 (32) > [139] : 0x00 (0) > [140] : 0x6d (109) > [141] : 0x00 (0) > [142] : 0x61 (97) > [143] : 0x00 (0) > [144] : 0x6e (110) > [145] : 0x00 (0) > [146] : 0x61 (97) > [147] : 0x00 (0) > [148] : 0x67 (103) > [149] : 0x00 (0) > [150] : 0x65 (101) > [151] : 0x00 (0) > [152] : 0x61 (97) > [153] : 0x00 (0) > [154] : 0x62 (98) > [155] : 0x00 (0) > [156] : 0x6c (108) > [157] : 0x00 (0) > [158] : 0x65 (101) > [159] : 0x00 (0) > [160] : 0x29 (41) > [161] : 0x00 (0) > [162] : 0x00 (0) > [163] : 0x00 (0) > size : 0x000000a4 (164) >[2011/12/15 11:45:27.597837, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.597962, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] >[2011/12/15 11:45:27.598027, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.598168, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.598371, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.598499, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.598620, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.598682, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.598744, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.599009, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0068 (104) > name_size : 0x0068 (104) > name : * > name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2011/12/15 11:45:27.599955, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.600083, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' >[2011/12/15 11:45:27.600147, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.600209, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.600273, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.600332, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.600393, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.600451, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.600536, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.600599, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.600663, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.600722, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.600783, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.600841, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.600926, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.600990, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.601120, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.601185, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.601245, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.601305, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.601364, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.601473, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.601537, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [NETLOGON] >[2011/12/15 11:45:27.601598, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.601663, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:45:27.601740, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:45:27.601802, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.601860, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:45:27.601945, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.602008, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2011/12/15 11:45:27.602068, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.602133, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:45:27.602194, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:45:27.602255, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.602314, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:45:27.602399, 10] registry/reg_backend_db.c:1630(regdb_fetch_keys_internal) > regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:45:27.602470, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.602545, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.602667, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-e94e-97a5dc110000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:45:27.603003, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2011/12/15 11:45:27.606938, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.607062, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] >[2011/12/15 11:45:27.607125, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0xc62440) >[2011/12/15 11:45:27.607188, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:45:27.607272, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Security], len: 120 >[2011/12/15 11:45:27.607336, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.607474, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.607679, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.607819, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.607941, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.608001, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.608063, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.608324, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0062 (98) > name_size : 0x0062 (98) > name : * > name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2011/12/15 11:45:27.609249, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.609456, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' >[2011/12/15 11:45:27.609522, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.609583, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.609647, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.609706, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.609767, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.609825, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.609908, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.609985, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.610051, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.610111, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.610172, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.610230, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.610314, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.610378, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.610438, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.610509, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.610570, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.610630, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.610689, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.610786, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.610849, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [RemoteRegistry] >[2011/12/15 11:45:27.610910, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.610975, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:45:27.611035, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:45:27.611096, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.611155, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:45:27.611237, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.611302, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.611428, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:45:27.611741, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.612316, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.612440, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] >[2011/12/15 11:45:27.612502, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0xc62440) >[2011/12/15 11:45:27.612565, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:45:27.612648, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Start], len: 4 >[2011/12/15 11:45:27.612713, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Type], len: 4 >[2011/12/15 11:45:27.612776, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:45:27.612838, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ObjectName], len: 24 >[2011/12/15 11:45:27.612902, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 48 >[2011/12/15 11:45:27.612965, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ImagePath], len: 72 >[2011/12/15 11:45:27.613028, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Description], len: 126 >[2011/12/15 11:45:27.613090, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.613232, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.613791, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.613985, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] >[2011/12/15 11:45:27.614049, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.614207, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.614775, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.614900, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] >[2011/12/15 11:45:27.614964, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.615108, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2011/12/15 11:45:27.616234, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.616374, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] >[2011/12/15 11:45:27.616439, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.616589, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(48) > [0] : 0x52 (82) > [1] : 0x00 (0) > [2] : 0x65 (101) > [3] : 0x00 (0) > [4] : 0x6d (109) > [5] : 0x00 (0) > [6] : 0x6f (111) > [7] : 0x00 (0) > [8] : 0x74 (116) > [9] : 0x00 (0) > [10] : 0x65 (101) > [11] : 0x00 (0) > [12] : 0x20 (32) > [13] : 0x00 (0) > [14] : 0x52 (82) > [15] : 0x00 (0) > [16] : 0x65 (101) > [17] : 0x00 (0) > [18] : 0x67 (103) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x73 (115) > [23] : 0x00 (0) > [24] : 0x74 (116) > [25] : 0x00 (0) > [26] : 0x72 (114) > [27] : 0x00 (0) > [28] : 0x79 (121) > [29] : 0x00 (0) > [30] : 0x20 (32) > [31] : 0x00 (0) > [32] : 0x53 (83) > [33] : 0x00 (0) > [34] : 0x65 (101) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x76 (118) > [39] : 0x00 (0) > [40] : 0x69 (105) > [41] : 0x00 (0) > [42] : 0x63 (99) > [43] : 0x00 (0) > [44] : 0x65 (101) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > size : 0x00000030 (48) >[2011/12/15 11:45:27.618503, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.618629, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] >[2011/12/15 11:45:27.618699, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.618846, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(72) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x68 (104) > [3] : 0x00 (0) > [4] : 0x6f (111) > [5] : 0x00 (0) > [6] : 0x6d (109) > [7] : 0x00 (0) > [8] : 0x65 (101) > [9] : 0x00 (0) > [10] : 0x2f (47) > [11] : 0x00 (0) > [12] : 0x64 (100) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x2f (47) > [17] : 0x00 (0) > [18] : 0x62 (98) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x6e (110) > [23] : 0x00 (0) > [24] : 0x2f (47) > [25] : 0x00 (0) > [26] : 0x73 (115) > [27] : 0x00 (0) > [28] : 0x61 (97) > [29] : 0x00 (0) > [30] : 0x6d (109) > [31] : 0x00 (0) > [32] : 0x62 (98) > [33] : 0x00 (0) > [34] : 0x61 (97) > [35] : 0x00 (0) > [36] : 0x33 (51) > [37] : 0x00 (0) > [38] : 0x2f (47) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x62 (98) > [45] : 0x00 (0) > [46] : 0x2f (47) > [47] : 0x00 (0) > [48] : 0x73 (115) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x63 (99) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x74 (116) > [57] : 0x00 (0) > [58] : 0x6c (108) > [59] : 0x00 (0) > [60] : 0x2f (47) > [61] : 0x00 (0) > [62] : 0x73 (115) > [63] : 0x00 (0) > [64] : 0x6d (109) > [65] : 0x00 (0) > [66] : 0x62 (98) > [67] : 0x00 (0) > [68] : 0x64 (100) > [69] : 0x00 (0) > [70] : 0x00 (0) > [71] : 0x00 (0) > size : 0x00000048 (72) >[2011/12/15 11:45:27.621333, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.621467, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] >[2011/12/15 11:45:27.621532, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.621677, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(126) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x70 (112) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x6f (111) > [39] : 0x00 (0) > [40] : 0x76 (118) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x64 (100) > [45] : 0x00 (0) > [46] : 0x69 (105) > [47] : 0x00 (0) > [48] : 0x6e (110) > [49] : 0x00 (0) > [50] : 0x67 (103) > [51] : 0x00 (0) > [52] : 0x20 (32) > [53] : 0x00 (0) > [54] : 0x72 (114) > [55] : 0x00 (0) > [56] : 0x65 (101) > [57] : 0x00 (0) > [58] : 0x6d (109) > [59] : 0x00 (0) > [60] : 0x6f (111) > [61] : 0x00 (0) > [62] : 0x74 (116) > [63] : 0x00 (0) > [64] : 0x65 (101) > [65] : 0x00 (0) > [66] : 0x20 (32) > [67] : 0x00 (0) > [68] : 0x61 (97) > [69] : 0x00 (0) > [70] : 0x63 (99) > [71] : 0x00 (0) > [72] : 0x63 (99) > [73] : 0x00 (0) > [74] : 0x65 (101) > [75] : 0x00 (0) > [76] : 0x73 (115) > [77] : 0x00 (0) > [78] : 0x73 (115) > [79] : 0x00 (0) > [80] : 0x20 (32) > [81] : 0x00 (0) > [82] : 0x74 (116) > [83] : 0x00 (0) > [84] : 0x6f (111) > [85] : 0x00 (0) > [86] : 0x20 (32) > [87] : 0x00 (0) > [88] : 0x74 (116) > [89] : 0x00 (0) > [90] : 0x68 (104) > [91] : 0x00 (0) > [92] : 0x65 (101) > [93] : 0x00 (0) > [94] : 0x20 (32) > [95] : 0x00 (0) > [96] : 0x53 (83) > [97] : 0x00 (0) > [98] : 0x61 (97) > [99] : 0x00 (0) > [100] : 0x6d (109) > [101] : 0x00 (0) > [102] : 0x62 (98) > [103] : 0x00 (0) > [104] : 0x61 (97) > [105] : 0x00 (0) > [106] : 0x20 (32) > [107] : 0x00 (0) > [108] : 0x72 (114) > [109] : 0x00 (0) > [110] : 0x65 (101) > [111] : 0x00 (0) > [112] : 0x67 (103) > [113] : 0x00 (0) > [114] : 0x69 (105) > [115] : 0x00 (0) > [116] : 0x73 (115) > [117] : 0x00 (0) > [118] : 0x74 (116) > [119] : 0x00 (0) > [120] : 0x72 (114) > [121] : 0x00 (0) > [122] : 0x79 (121) > [123] : 0x00 (0) > [124] : 0x00 (0) > [125] : 0x00 (0) > size : 0x0000007e (126) >[2011/12/15 11:45:27.625729, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.625857, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] >[2011/12/15 11:45:27.625921, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.626061, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.626263, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.626390, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.626539, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.626601, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.626663, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.626927, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0074 (116) > name_size : 0x0074 (116) > name : * > name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2011/12/15 11:45:27.627928, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.628106, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' >[2011/12/15 11:45:27.628184, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.628256, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.628333, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.628405, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.628479, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.628548, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.628660, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.628736, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.628814, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.628916, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.628990, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.629059, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.629172, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.629248, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.629321, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.629401, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.629493, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.629568, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.629637, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.629770, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.629849, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [RemoteRegistry] >[2011/12/15 11:45:27.629921, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.630002, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:45:27.630073, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:45:27.630149, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.630219, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:45:27.630329, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.630404, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2011/12/15 11:45:27.630479, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.630559, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:45:27.630633, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:45:27.630709, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.630779, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:45:27.630883, 10] registry/reg_backend_db.c:1630(regdb_fetch_keys_internal) > regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:45:27.630961, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.631039, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.631209, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-e94e-97a5dc110000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:45:27.631782, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2011/12/15 11:45:27.636556, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.636746, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] >[2011/12/15 11:45:27.636825, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0xc62440) >[2011/12/15 11:45:27.636902, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:45:27.637016, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Security], len: 120 >[2011/12/15 11:45:27.637094, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.637287, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.637567, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.637849, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.638022, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.638095, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.638170, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.638531, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x004e (78) > name_size : 0x004e (78) > name : * > name : 'SYSTEM\CurrentControlSet\Services\WINS' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2011/12/15 11:45:27.639711, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.639902, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' >[2011/12/15 11:45:27.639982, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.640056, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.640135, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.640207, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.640281, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.640350, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.640464, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.640541, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.640621, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.640692, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.640765, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.640834, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.640945, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.641023, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.641096, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.641175, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.641247, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.641321, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.641391, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.641546, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.641623, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [WINS] >[2011/12/15 11:45:27.641696, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.641775, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:45:27.641848, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:45:27.641955, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.642136, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:45:27.642264, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.642357, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.642550, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:45:27.642983, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.643675, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.643861, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] >[2011/12/15 11:45:27.643939, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0xc62440) >[2011/12/15 11:45:27.644013, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:45:27.644128, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Start], len: 4 >[2011/12/15 11:45:27.644206, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Type], len: 4 >[2011/12/15 11:45:27.644281, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:45:27.644356, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ObjectName], len: 24 >[2011/12/15 11:45:27.644431, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 74 >[2011/12/15 11:45:27.644506, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ImagePath], len: 72 >[2011/12/15 11:45:27.644582, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Description], len: 178 >[2011/12/15 11:45:27.644658, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.644887, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.645602, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.645786, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] >[2011/12/15 11:45:27.645870, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.646069, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:45:27.646761, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.647058, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] >[2011/12/15 11:45:27.647149, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.647352, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2011/12/15 11:45:27.648772, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.648963, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] >[2011/12/15 11:45:27.649047, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.649258, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(74) > [0] : 0x57 (87) > [1] : 0x00 (0) > [2] : 0x69 (105) > [3] : 0x00 (0) > [4] : 0x6e (110) > [5] : 0x00 (0) > [6] : 0x64 (100) > [7] : 0x00 (0) > [8] : 0x6f (111) > [9] : 0x00 (0) > [10] : 0x77 (119) > [11] : 0x00 (0) > [12] : 0x73 (115) > [13] : 0x00 (0) > [14] : 0x20 (32) > [15] : 0x00 (0) > [16] : 0x49 (73) > [17] : 0x00 (0) > [18] : 0x6e (110) > [19] : 0x00 (0) > [20] : 0x74 (116) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x72 (114) > [25] : 0x00 (0) > [26] : 0x6e (110) > [27] : 0x00 (0) > [28] : 0x65 (101) > [29] : 0x00 (0) > [30] : 0x74 (116) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x4e (78) > [35] : 0x00 (0) > [36] : 0x61 (97) > [37] : 0x00 (0) > [38] : 0x6d (109) > [39] : 0x00 (0) > [40] : 0x65 (101) > [41] : 0x00 (0) > [42] : 0x20 (32) > [43] : 0x00 (0) > [44] : 0x53 (83) > [45] : 0x00 (0) > [46] : 0x65 (101) > [47] : 0x00 (0) > [48] : 0x72 (114) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x69 (105) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x65 (101) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x28 (40) > [61] : 0x00 (0) > [62] : 0x57 (87) > [63] : 0x00 (0) > [64] : 0x49 (73) > [65] : 0x00 (0) > [66] : 0x4e (78) > [67] : 0x00 (0) > [68] : 0x53 (83) > [69] : 0x00 (0) > [70] : 0x29 (41) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > size : 0x0000004a (74) >[2011/12/15 11:45:27.652547, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.652734, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] >[2011/12/15 11:45:27.652819, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.653071, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(72) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x68 (104) > [3] : 0x00 (0) > [4] : 0x6f (111) > [5] : 0x00 (0) > [6] : 0x6d (109) > [7] : 0x00 (0) > [8] : 0x65 (101) > [9] : 0x00 (0) > [10] : 0x2f (47) > [11] : 0x00 (0) > [12] : 0x64 (100) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x2f (47) > [17] : 0x00 (0) > [18] : 0x62 (98) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x6e (110) > [23] : 0x00 (0) > [24] : 0x2f (47) > [25] : 0x00 (0) > [26] : 0x73 (115) > [27] : 0x00 (0) > [28] : 0x61 (97) > [29] : 0x00 (0) > [30] : 0x6d (109) > [31] : 0x00 (0) > [32] : 0x62 (98) > [33] : 0x00 (0) > [34] : 0x61 (97) > [35] : 0x00 (0) > [36] : 0x33 (51) > [37] : 0x00 (0) > [38] : 0x2f (47) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x62 (98) > [45] : 0x00 (0) > [46] : 0x2f (47) > [47] : 0x00 (0) > [48] : 0x73 (115) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x63 (99) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x74 (116) > [57] : 0x00 (0) > [58] : 0x6c (108) > [59] : 0x00 (0) > [60] : 0x2f (47) > [61] : 0x00 (0) > [62] : 0x6e (110) > [63] : 0x00 (0) > [64] : 0x6d (109) > [65] : 0x00 (0) > [66] : 0x62 (98) > [67] : 0x00 (0) > [68] : 0x64 (100) > [69] : 0x00 (0) > [70] : 0x00 (0) > [71] : 0x00 (0) > size : 0x00000048 (72) >[2011/12/15 11:45:27.656206, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.656394, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] >[2011/12/15 11:45:27.656480, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.656687, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(178) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x70 (112) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x6f (111) > [39] : 0x00 (0) > [40] : 0x76 (118) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x64 (100) > [45] : 0x00 (0) > [46] : 0x69 (105) > [47] : 0x00 (0) > [48] : 0x6e (110) > [49] : 0x00 (0) > [50] : 0x67 (103) > [51] : 0x00 (0) > [52] : 0x20 (32) > [53] : 0x00 (0) > [54] : 0x61 (97) > [55] : 0x00 (0) > [56] : 0x20 (32) > [57] : 0x00 (0) > [58] : 0x4e (78) > [59] : 0x00 (0) > [60] : 0x65 (101) > [61] : 0x00 (0) > [62] : 0x74 (116) > [63] : 0x00 (0) > [64] : 0x42 (66) > [65] : 0x00 (0) > [66] : 0x49 (73) > [67] : 0x00 (0) > [68] : 0x4f (79) > [69] : 0x00 (0) > [70] : 0x53 (83) > [71] : 0x00 (0) > [72] : 0x20 (32) > [73] : 0x00 (0) > [74] : 0x70 (112) > [75] : 0x00 (0) > [76] : 0x6f (111) > [77] : 0x00 (0) > [78] : 0x69 (105) > [79] : 0x00 (0) > [80] : 0x6e (110) > [81] : 0x00 (0) > [82] : 0x74 (116) > [83] : 0x00 (0) > [84] : 0x2d (45) > [85] : 0x00 (0) > [86] : 0x74 (116) > [87] : 0x00 (0) > [88] : 0x6f (111) > [89] : 0x00 (0) > [90] : 0x2d (45) > [91] : 0x00 (0) > [92] : 0x70 (112) > [93] : 0x00 (0) > [94] : 0x6f (111) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x6e (110) > [99] : 0x00 (0) > [100] : 0x74 (116) > [101] : 0x00 (0) > [102] : 0x20 (32) > [103] : 0x00 (0) > [104] : 0x6e (110) > [105] : 0x00 (0) > [106] : 0x61 (97) > [107] : 0x00 (0) > [108] : 0x6d (109) > [109] : 0x00 (0) > [110] : 0x65 (101) > [111] : 0x00 (0) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x73 (115) > [115] : 0x00 (0) > [116] : 0x65 (101) > [117] : 0x00 (0) > [118] : 0x72 (114) > [119] : 0x00 (0) > [120] : 0x76 (118) > [121] : 0x00 (0) > [122] : 0x65 (101) > [123] : 0x00 (0) > [124] : 0x72 (114) > [125] : 0x00 (0) > [126] : 0x28 (40) > [127] : 0x00 (0) > [128] : 0x6e (110) > [129] : 0x00 (0) > [130] : 0x6f (111) > [131] : 0x00 (0) > [132] : 0x74 (116) > [133] : 0x00 (0) > [134] : 0x20 (32) > [135] : 0x00 (0) > [136] : 0x72 (114) > [137] : 0x00 (0) > [138] : 0x65 (101) > [139] : 0x00 (0) > [140] : 0x6d (109) > [141] : 0x00 (0) > [142] : 0x6f (111) > [143] : 0x00 (0) > [144] : 0x74 (116) > [145] : 0x00 (0) > [146] : 0x65 (101) > [147] : 0x00 (0) > [148] : 0x6c (108) > [149] : 0x00 (0) > [150] : 0x79 (121) > [151] : 0x00 (0) > [152] : 0x20 (32) > [153] : 0x00 (0) > [154] : 0x6d (109) > [155] : 0x00 (0) > [156] : 0x61 (97) > [157] : 0x00 (0) > [158] : 0x6e (110) > [159] : 0x00 (0) > [160] : 0x61 (97) > [161] : 0x00 (0) > [162] : 0x67 (103) > [163] : 0x00 (0) > [164] : 0x65 (101) > [165] : 0x00 (0) > [166] : 0x61 (97) > [167] : 0x00 (0) > [168] : 0x62 (98) > [169] : 0x00 (0) > [170] : 0x6c (108) > [171] : 0x00 (0) > [172] : 0x65 (101) > [173] : 0x00 (0) > [174] : 0x29 (41) > [175] : 0x00 (0) > [176] : 0x00 (0) > [177] : 0x00 (0) > size : 0x000000b2 (178) >[2011/12/15 11:45:27.662344, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.662478, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] >[2011/12/15 11:45:27.662545, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.662689, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.662895, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.663017, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.663138, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.663199, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.663262, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.663527, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0060 (96) > name_size : 0x0060 (96) > name : * > name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2011/12/15 11:45:27.664472, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.664599, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' >[2011/12/15 11:45:27.664664, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.664727, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.664792, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.664923, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.664986, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.665045, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.665133, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.665196, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.665261, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.665321, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.665382, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.665450, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.665539, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.665604, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.665664, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.665729, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.665789, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.665850, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.665908, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.666009, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.666074, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [WINS] >[2011/12/15 11:45:27.666136, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.666201, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:45:27.666284, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:45:27.666346, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.666404, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:45:27.666494, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.666558, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2011/12/15 11:45:27.666618, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:45:27.666684, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:45:27.666743, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:45:27.666805, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.666863, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:45:27.666941, 10] registry/reg_backend_db.c:1630(regdb_fetch_keys_internal) > regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:45:27.667004, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:45:27.667068, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.667192, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-e94e-97a5dc110000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:45:27.667518, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-e94e-97a5dc110000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2011/12/15 11:45:27.671471, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.671594, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] >[2011/12/15 11:45:27.671657, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0xc62440) >[2011/12/15 11:45:27.671721, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:45:27.671805, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Security], len: 120 >[2011/12/15 11:45:27.671869, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:45:27.672008, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.672214, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.672338, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.672475, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.672536, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.672598, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.672848, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.673054, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.673180, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.673305, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.673378, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (3->2) >[2011/12/15 11:45:27.673450, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.673705, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (2->1) >[2011/12/15 11:45:27.673799, 3] rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg) > Initialise the eventlog registry keys if needed. >[2011/12/15 11:45:27.673863, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \winreg >[2011/12/15 11:45:27.673935, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 2 for pipe \winreg >[2011/12/15 11:45:27.674006, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \winreg (pipes_open=0) >[2011/12/15 11:45:27.674080, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : NULL > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:45:27.674519, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2011/12/15 11:45:27.674583, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (1->2) >[2011/12/15 11:45:27.674664, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2011/12/15 11:45:27.674726, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2011/12/15 11:45:27.674786, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.674844, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM] >[2011/12/15 11:45:27.674937, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[2] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.675065, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000b-0000-0000-e94e-97a5dc110000 > result : WERR_OK >[2011/12/15 11:45:27.675325, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000b-0000-0000-e94e-97a5dc110000 > keyname: struct winreg_String > name_len : 0x0056 (86) > name_size : 0x0056 (86) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Eventlog' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:45:27.676040, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.676168, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:45:27.676229, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (2->3) >[2011/12/15 11:45:27.676293, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:45:27.676353, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:45:27.676414, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.676472, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM] >[2011/12/15 11:45:27.676631, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:45:27.676695, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.676760, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.676820, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.676898, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.676958, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:45:27.677049, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.677113, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:45:27.677174, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.677238, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.677299, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.677359, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.677418, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:45:27.677533, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.677597, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Eventlog] >[2011/12/15 11:45:27.677658, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:45:27.677724, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:45:27.677784, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:45:27.677845, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:45:27.677903, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0xc62440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:45:27.677989, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:45:27.678053, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.678244, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-e94e-97a5dc110000 > result : WERR_OK >[2011/12/15 11:45:27.678507, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > in: struct winreg_QueryInfoKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-e94e-97a5dc110000 > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL >[2011/12/15 11:45:27.678848, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.679006, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0xc62440) >[2011/12/15 11:45:27.679069, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:45:27.679172, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 20 >[2011/12/15 11:45:27.679237, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:45:27.679301, 10] registry/reg_backend_db.c:1871(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:45:27.679393, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > out: struct winreg_QueryInfoKey > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL > num_subkeys : * > num_subkeys : 0x00000000 (0) > max_subkeylen : * > max_subkeylen : 0x00000000 (0) > max_classlen : * > max_classlen : 0x00000000 (0) > num_values : * > num_values : 0x00000002 (2) > max_valnamelen : * > max_valnamelen : 0x0000001a (26) > max_valbufsize : * > max_valbufsize : 0x00000014 (20) > secdescsize : * > secdescsize : 0x00000078 (120) > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:45:27.680165, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-e94e-97a5dc110000 >[2011/12/15 11:45:27.680371, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.680494, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 E9 4E 97 A5 ........ .....N.. > [0010] DC 11 00 00 .... >[2011/12/15 11:45:27.680615, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:45:27.680675, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (3->2) >[2011/12/15 11:45:27.680737, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:45:27.681023, 3] printing/pcap.c:138(pcap_cache_reload) > reloading printcap cache >[2011/12/15 11:45:27.681117, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 5052494E5445524C4953 >[2011/12/15 11:45:27.681192, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x2210f858 >[2011/12/15 11:45:27.681364, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 5052494E5445524C4953 >[2011/12/15 11:45:27.681474, 0] printing/print_standard.c:68(std_pcap_cache_reload) > Unable to open printcap file /etc/printcap for read! >[2011/12/15 11:45:27.681537, 3] printing/pcap.c:189(pcap_cache_reload) > reload status: error >[2011/12/15 11:45:27.681619, 3] printing/printing.c:1644(start_background_queue) > start_background_queue: Starting background LPQ thread >[2011/12/15 11:45:27.682178, 10] lib/util_sock.c:681(open_socket_in) >[2011/12/15 11:45:27.681988, 5] printing/printing.c:1667(start_background_queue) > bind succeeded on port 445 > start_background_queue: background LPQ thread started >[2011/12/15 11:45:27.682318, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 >[2011/12/15 11:45:27.682640, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > Locking key DD110000FFFFFFFF > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 >[2011/12/15 11:45:27.682813, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22113358 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2011/12/15 11:45:27.683054, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > TCP_QUICKACK = 1 > Unlocking key DD110000FFFFFFFF >[2011/12/15 11:45:27.683139, 5] lib/util_sock.c:162(print_socket_options) > Socket options: >[2011/12/15 11:45:27.683191, 5] printing/printing.c:1703(start_background_queue) > SO_KEEPALIVE = 1 > start_background_queue: background LPQ thread waiting for messages > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:45:27.683734, 10] lib/util_sock.c:681(open_socket_in) > bind succeeded on port 139 >[2011/12/15 11:45:27.683813, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:45:27.684267, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:45:27.684747, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key DC110000FFFFFFFF >[2011/12/15 11:45:27.684819, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x2210e800 >[2011/12/15 11:45:27.684907, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key DC110000FFFFFFFF >[2011/12/15 11:45:27.684991, 10] smbd/process.c:919(event_add_idle) > event_add_idle: idle_evt(parent_housekeeping) 0x2210fa10 >[2011/12/15 11:45:27.685060, 5] lib/messages.c:300(messaging_register) > Overriding messaging pointer for type 1 - private_data=(nil) >[2011/12/15 11:45:27.685193, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (2->1) >[2011/12/15 11:45:27.685260, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (1->0) >[2011/12/15 11:45:27.685337, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \winreg >[2011/12/15 11:45:27.685429, 2] smbd/server.c:836(smbd_parent_loop) > waiting for connections >[2011/12/15 11:45:30.680249, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key DF110000FFFFFFFF >[2011/12/15 11:45:30.680489, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x2210a4b8 >[2011/12/15 11:45:30.680581, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key DF110000FFFFFFFF >[2011/12/15 11:45:30.680677, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:45:30.681182, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:45:30.681795, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:45:30.681939, 3] lib/access.c:338(allow_access) > Allowed connection from 81.95.129.43 (81.95.129.43) >[2011/12/15 11:45:30.682000, 10] smbd/process.c:3018(smbd_process) > Connection allowed from ipv4:81.95.129.43:2641 to ipv4:194.87.37.17:445 >[2011/12/15 11:45:30.682116, 3] smbd/oplock.c:922(init_oplocks) > init_oplocks: initializing messages. >[2011/12/15 11:45:30.682271, 3] smbd/oplock_linux.c:226(linux_init_kernel_oplocks) > Linux kernel oplocks enabled >[2011/12/15 11:45:30.682337, 5] lib/messages.c:332(messaging_deregister) > Deregistering messaging pointer for type 1 - private_data=(nil) >[2011/12/15 11:45:30.682414, 10] smbd/process.c:919(event_add_idle) > event_add_idle: idle_evt(keepalive) 0x22104350 >[2011/12/15 11:45:30.682490, 10] smbd/process.c:919(event_add_idle) > event_add_idle: idle_evt(deadtime) 0x2210c1d0 >[2011/12/15 11:45:30.682562, 10] smbd/process.c:919(event_add_idle) > event_add_idle: idle_evt(housekeeping) 0x2210bfb0 >[2011/12/15 11:45:30.682684, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 133 >[2011/12/15 11:45:30.682761, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x85 >[2011/12/15 11:45:30.682823, 3] smbd/process.c:1661(process_smb) > Transaction 0 of length 137 (0 toread) >[2011/12/15 11:45:30.682883, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.682919, 5] lib/util.c:342(show_msg) > size=133 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51283 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=0 > smt_wct=0 > smb_bcc=98 >[2011/12/15 11:45:30.683235, 10] ../lib/util/util.c:415(dump_data) > [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG > [0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 > [0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for > [0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. > [0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM > [0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 > [0060] 32 00 2. >[2011/12/15 11:45:30.683610, 3] smbd/process.c:1466(switch_message) > switch message SMBnegprot (pid 4575) conn 0x0 >[2011/12/15 11:45:30.683678, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.683747, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.683817, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.683937, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:45:30.684328, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [PC NETWORK PROGRAM 1.0] >[2011/12/15 11:45:30.684402, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [LANMAN1.0] >[2011/12/15 11:45:30.684465, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [Windows for Workgroups 3.1a] >[2011/12/15 11:45:30.684548, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [LM1.2X002] >[2011/12/15 11:45:30.684612, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [LANMAN2.1] >[2011/12/15 11:45:30.684674, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [NT LM 0.12] >[2011/12/15 11:45:30.684743, 10] lib/util.c:1624(set_remote_arch) > set_remote_arch: Client arch is 'Win2K' >[2011/12/15 11:45:30.684822, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:45:30.684952, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key DF110000FFFFFFFF >[2011/12/15 11:45:30.685021, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x2211ab30 >[2011/12/15 11:45:30.685100, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key DF110000FFFFFFFF >[2011/12/15 11:45:30.685188, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:45:30.685338, 10] smbd/negprot.c:44(get_challenge) > get challenge: creating negprot_global_auth_context >[2011/12/15 11:45:30.685401, 5] auth/auth.c:508(make_auth_context_subsystem) > Making default auth method list for security=share, encrypt passwords = yes >[2011/12/15 11:45:30.685482, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend sam >[2011/12/15 11:45:30.685547, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'sam' >[2011/12/15 11:45:30.685607, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend sam_ignoredomain >[2011/12/15 11:45:30.685667, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'sam_ignoredomain' >[2011/12/15 11:45:30.685729, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend unix >[2011/12/15 11:45:30.685790, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'unix' >[2011/12/15 11:45:30.685849, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend winbind >[2011/12/15 11:45:30.685910, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'winbind' >[2011/12/15 11:45:30.685972, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend wbc >[2011/12/15 11:45:30.686033, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'wbc' >[2011/12/15 11:45:30.686092, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend smbserver >[2011/12/15 11:45:30.686153, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'smbserver' >[2011/12/15 11:45:30.686215, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend trustdomain >[2011/12/15 11:45:30.686275, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'trustdomain' >[2011/12/15 11:45:30.686335, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend ntdomain >[2011/12/15 11:45:30.686395, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'ntdomain' >[2011/12/15 11:45:30.686461, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend guest >[2011/12/15 11:45:30.686524, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'guest' >[2011/12/15 11:45:30.686584, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2011/12/15 11:45:30.686644, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method guest has a valid init >[2011/12/15 11:45:30.686704, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam >[2011/12/15 11:45:30.686765, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method sam has a valid init >[2011/12/15 11:45:30.686826, 10] smbd/negprot.c:52(get_challenge) > get challenge: getting challenge >[2011/12/15 11:45:30.686905, 5] auth/auth.c:99(get_ntlm_challenge) > auth_get_challenge: module guest did not want to specify a challenge >[2011/12/15 11:45:30.686967, 5] auth/auth.c:99(get_ntlm_challenge) > auth_get_challenge: module sam did not want to specify a challenge >[2011/12/15 11:45:30.687038, 5] auth/auth.c:134(get_ntlm_challenge) > auth_context challenge created by random >[2011/12/15 11:45:30.687097, 5] auth/auth.c:135(get_ntlm_challenge) > challenge is: >[2011/12/15 11:45:30.687159, 5] ../lib/util/util.c:415(dump_data) > [0000] F8 02 F9 89 D8 E9 1E 26 .......& >[2011/12/15 11:45:30.687244, 3] smbd/negprot.c:401(reply_nt1) > not using SPNEGO >[2011/12/15 11:45:30.687304, 3] smbd/negprot.c:704(reply_negprot) > Selected protocol NT LM 0.12 >[2011/12/15 11:45:30.687363, 5] smbd/negprot.c:711(reply_negprot) > negprot index=5 >[2011/12/15 11:45:30.687424, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.687460, 5] lib/util.c:342(show_msg) > size=87 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=0 > smt_wct=17 > smb_vwv[ 0]= 5 (0x5) > smb_vwv[ 1]=12802 (0x3202) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=57088 (0xDF00) > smb_vwv[ 8]= 17 (0x11) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=33011 (0x80F3) > smb_vwv[11]=35840 (0x8C00) > smb_vwv[12]=61979 (0xF21B) > smb_vwv[13]=64900 (0xFD84) > smb_vwv[14]=52410 (0xCCBA) > smb_vwv[15]= 4097 (0x1001) > smb_vwv[16]= 2303 (0x8FF) > smb_bcc=18 >[2011/12/15 11:45:30.688180, 10] ../lib/util/util.c:415(dump_data) > [0000] F8 02 F9 89 D8 E9 1E 26 54 00 45 00 53 00 54 00 .......& T.E.S.T. > [0010] 00 00 .. >[2011/12/15 11:45:30.693908, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 276 >[2011/12/15 11:45:30.693999, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x114 >[2011/12/15 11:45:30.694060, 3] smbd/process.c:1661(process_smb) > Transaction 1 of length 280 (0 toread) >[2011/12/15 11:45:30.694121, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.694157, 5] lib/util.c:342(show_msg) > size=276 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=64 > smt_wct=13 > smb_vwv[ 0]= 117 (0x75) > smb_vwv[ 1]= 186 (0xBA) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4575 (0x11DF) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1 (0x1) > smb_vwv[ 8]= 1 (0x1) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 212 (0xD4) > smb_vwv[12]= 0 (0x0) > smb_bcc=125 >[2011/12/15 11:45:30.694788, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 64 00 6D 00 00 00 44 00 4D 00 54 00 45 ...d.m.. .D.M.T.E > [0010] 00 53 00 54 00 00 00 57 00 69 00 6E 00 64 00 6F .S.T...W .i.n.d.o > [0020] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. > [0030] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e. > [0040] 00 50 00 61 00 63 00 6B 00 20 00 33 00 20 00 32 .P.a.c.k . .3. .2 > [0050] 00 36 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 .6.0.0.. .W.i.n.d > [0060] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 > [0070] 00 20 00 35 00 2E 00 31 00 00 00 00 00 . .5...1 ..... >[2011/12/15 11:45:30.695188, 3] smbd/process.c:1466(switch_message) > switch message SMBsesssetupX (pid 4575) conn 0x0 >[2011/12/15 11:45:30.695250, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.695311, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.695371, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.695465, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:45:30.695555, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) > wct=13 flg2=0xc807 >[2011/12/15 11:45:30.695629, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) > Domain=[DMTEST] NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2011/12/15 11:45:30.695693, 10] lib/util.c:1624(set_remote_arch) > set_remote_arch: Client arch is 'WinXP' >[2011/12/15 11:45:30.695755, 2] smbd/sesssetup.c:1279(setup_new_vc_session) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2011/12/15 11:45:30.695816, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) > sesssetupX:name=[DMTEST]\[dm]@[81.95.129.43] >[2011/12/15 11:45:30.695898, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:45:30.696035, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user dm >[2011/12/15 11:45:30.696096, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is dm >[2011/12/15 11:45:30.696256, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [dm]! >[2011/12/15 11:45:30.696327, 3] smbd/sesssetup.c:151(check_guest_password) > Got anonymous request >[2011/12/15 11:45:30.696386, 5] auth/auth.c:508(make_auth_context_subsystem) > Making default auth method list for security=share, encrypt passwords = yes >[2011/12/15 11:45:30.696449, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2011/12/15 11:45:30.696511, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method guest has a valid init >[2011/12/15 11:45:30.696571, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam >[2011/12/15 11:45:30.696632, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method sam has a valid init >[2011/12/15 11:45:30.696695, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for () >[2011/12/15 11:45:30.696757, 5] auth/user_info.c:70(make_user_info) > making strings for 's user_info struct >[2011/12/15 11:45:30.696819, 5] auth/user_info.c:87(make_user_info) > making blobs for 's user_info struct >[2011/12/15 11:45:30.696879, 10] auth/user_info.c:123(make_user_info) > made a user_info for () >[2011/12/15 11:45:30.696939, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface >[2011/12/15 11:45:30.697012, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: []\[]@[] >[2011/12/15 11:45:30.697091, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by fixed >[2011/12/15 11:45:30.697158, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:45:30.697217, 5] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 ........ >[2011/12/15 11:45:30.697301, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [] >[2011/12/15 11:45:30.697385, 3] auth/auth.c:268(check_ntlm_password) > check_ntlm_password: guest authentication for user [] succeeded >[2011/12/15 11:45:30.697448, 5] auth/auth.c:309(check_ntlm_password) > check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded >[2011/12/15 11:45:30.697526, 3] smbd/process.c:1466(switch_message) > switch message SMBtconX (pid 4575) conn 0x0 >[2011/12/15 11:45:30.697589, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.697650, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.697708, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.697801, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:45:30.697900, 4] smbd/reply.c:794(reply_tcon_and_X) > Client requested device type [?????] for share [PUBLIC] >[2011/12/15 11:45:30.697991, 5] smbd/service.c:1267(make_connection) > making a connection to 'normal' service public >[2011/12/15 11:45:30.698057, 3] lib/access.c:338(allow_access) > Allowed connection from 81.95.129.43 (81.95.129.43) >[2011/12/15 11:45:30.698131, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user public >[2011/12/15 11:45:30.698191, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is public >[2011/12/15 11:45:30.698308, 5] lib/username.c:134(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as uppercase is PUBLIC >[2011/12/15 11:45:30.698422, 5] lib/username.c:143(Get_Pwnam_internals) > Checking combinations of 0 uppercase letters in public >[2011/12/15 11:45:30.698509, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals didn't find user [public]! >[2011/12/15 11:45:30.698594, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [DMTEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:45:30.698662, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [DMTEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:45:30.698723, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:45:30.698784, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:45:30.698845, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:45:30.698905, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:45:30.698965, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [DMTEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:45:30.699026, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:45:30.699086, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:45:30.699146, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:45:30.699204, 5] ../lib/util/util.c:415(dump_data) > [0000] F8 02 F9 89 D8 E9 1E 26 .......& >[2011/12/15 11:45:30.699287, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:45:30.699348, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:45:30.699412, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:45:30.699473, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:45:30.699539, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.699604, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.699665, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.699725, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.699784, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.699907, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:45:30.700003, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.700065, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:45:30.700129, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:45:30.700198, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:45:30.700283, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [DMTEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:45:30.700346, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [DMTEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:45:30.700406, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:45:30.700467, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:45:30.700528, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:45:30.700588, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:45:30.700648, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [DMTEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:45:30.700709, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:45:30.700769, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:45:30.700829, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:45:30.700888, 5] ../lib/util/util.c:415(dump_data) > [0000] F8 02 F9 89 D8 E9 1E 26 .......& >[2011/12/15 11:45:30.700972, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:45:30.701032, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:45:30.701096, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:45:30.701156, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:45:30.701219, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.701280, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.701340, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.701400, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.701463, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.701565, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:45:30.701657, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.701719, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:45:30.701780, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:45:30.701842, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:45:30.701907, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [TEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:45:30.701969, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [TEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:45:30.702030, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:45:30.702090, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:45:30.702151, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:45:30.702211, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:45:30.702271, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [TEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:45:30.702349, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:45:30.702411, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:45:30.702480, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:45:30.702539, 5] ../lib/util/util.c:415(dump_data) > [0000] F8 02 F9 89 D8 E9 1E 26 .......& >[2011/12/15 11:45:30.702623, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:45:30.702684, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:45:30.702748, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:45:30.702808, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:45:30.702870, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.702932, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.702992, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.703052, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.703112, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.703213, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:45:30.703305, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.703367, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:45:30.703427, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:45:30.703489, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:45:30.703555, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [TEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:45:30.703616, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [TEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:45:30.703676, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:45:30.703737, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:45:30.703797, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:45:30.703857, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:45:30.703917, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [TEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:45:30.703978, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:45:30.704038, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:45:30.704097, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:45:30.704156, 5] ../lib/util/util.c:415(dump_data) > [0000] F8 02 F9 89 D8 E9 1E 26 .......& >[2011/12/15 11:45:30.704239, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:45:30.704299, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:45:30.704363, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:45:30.704423, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:45:30.704485, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.704564, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.704625, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.704685, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.704744, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.704844, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:45:30.704936, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.704998, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:45:30.705059, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:45:30.705120, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:45:30.705189, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:30.705250, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:30.705312, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:30.705372, 3] smbd/password.c:720(authorise_login) > authorise_login: ACCEPTED: guest account and guest ok (nobody) >[2011/12/15 11:45:30.705437, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:30.705502, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:30.705564, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:30.705640, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\nobody => domain=[Unix User], name=[nobody] >[2011/12/15 11:45:30.705704, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:45:30.705815, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:30.705879, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:30.705941, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:30.706010, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was >[2011/12/15 11:45:30.706081, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name nobody, was >[2011/12/15 11:45:30.706143, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:45:30.706212, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-501 >[2011/12/15 11:45:30.706281, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-501 from rid 501 >[2011/12/15 11:45:30.706368, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was nobody >[2011/12/15 11:45:30.706430, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-22-1-65534 >[2011/12/15 11:45:30.706537, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for nobody >[2011/12/15 11:45:30.706602, 10] auth/server_info.c:354(samu_to_SamInfo3) > Unix User found in struct samu. Rid marked as special and sid (S-1-22-1-65534) saved as extra sid >[2011/12/15 11:45:30.706675, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:30.706737, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:30.706816, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:30.706910, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [nobody] >[2011/12/15 11:45:30.707067, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: ROCK\nobody => domain=[ROCK], name=[nobody] >[2011/12/15 11:45:30.707130, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:45:30.707193, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.707255, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.707315, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.707375, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.707434, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.707538, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_nobody >[2011/12/15 11:45:30.707630, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.707694, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.707755, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.707815, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.707875, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.707934, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.708045, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.708112, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\nobody => domain=[Unix User], name=[nobody] >[2011/12/15 11:45:30.708174, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:45:30.708242, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:30.708303, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:30.708364, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:30.708434, 10] passdb/lookup_sid.c:1527(sid_to_uid) > sid S-1-22-1-65534 -> uid 65534 >[2011/12/15 11:45:30.708550, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [nobody] >[2011/12/15 11:45:30.708675, 10] auth/token_util.c:339(create_local_nt_token) > Create local NT token for S-1-22-1-65534 >[2011/12/15 11:45:30.708789, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-544 >[2011/12/15 11:45:30.708855, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.708916, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.708976, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.709037, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.709096, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.709215, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.709278, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-544 >[2011/12/15 11:45:30.709342, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.709420, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.709488, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.709549, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.709608, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.709724, 3] auth/token_util.c:438(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:45:30.709794, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.709881, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-545 >[2011/12/15 11:45:30.709946, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.710007, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.710067, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.710127, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.710186, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.710297, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.710360, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-545 >[2011/12/15 11:45:30.710423, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.710493, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.710553, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.710613, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.710672, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.710772, 3] auth/token_util.c:469(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:45:30.710841, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.710905, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.710966, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.711026, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.711086, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.711145, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.711309, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.711393, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-1-65534] >[2011/12/15 11:45:30.711466, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-2-65534] >[2011/12/15 11:45:30.711542, 5] lib/privileges.c:175(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2011/12/15 11:45:30.711636, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2011/12/15 11:45:30.711707, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-32-546] >[2011/12/15 11:45:30.711860, 10] passdb/lookup_sid.c:1468(sids_to_unix_ids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2011/12/15 11:45:30.711928, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.712006, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.712067, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.712127, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.712186, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.712298, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.712360, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:45:30.712422, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:45:30.712485, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.712547, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.712607, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.712667, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.712726, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.712837, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.712901, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:45:30.712963, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:45:30.713026, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.713086, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.713146, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:45:30.713206, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.713265, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.713376, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.713439, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:45:30.713507, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:45:30.713570, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2011/12/15 11:45:30.713632, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2011/12/15 11:45:30.713694, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-32-546 to gid, ignoring it >[2011/12/15 11:45:30.713759, 10] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:30.713998, 10] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:45:30.714112, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:45:30.714172, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:45:30.714234, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:45:30.714311, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service public, connectpath = /mnt/public >[2011/12/15 11:45:30.714391, 3] smbd/service.c:845(make_connection_snum) > Connect path is '/mnt/public' for service [public] >[2011/12/15 11:45:30.714487, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:30.714557, 10] ../libcli/security/access_check.c:177(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x101f01ff, remaining = 0x101f01ff >[2011/12/15 11:45:30.714624, 3] smbd/vfs.c:102(vfs_init_default) > Initialising default vfs hooks >[2011/12/15 11:45:30.714690, 10] smbd/vfs.c:53(vfs_find_backend_entry) > vfs_find_backend_entry called for /[Default VFS]/ >[2011/12/15 11:45:30.714752, 5] smbd/vfs.c:92(smb_register_vfs) > Successfully added vfs backend '/[Default VFS]/' >[2011/12/15 11:45:30.714817, 10] smbd/vfs.c:53(vfs_find_backend_entry) > vfs_find_backend_entry called for posixacl >[2011/12/15 11:45:30.714884, 5] smbd/vfs.c:92(smb_register_vfs) > Successfully added vfs backend 'posixacl' >[2011/12/15 11:45:30.714951, 3] smbd/vfs.c:128(vfs_init_custom) > Initialising custom vfs hooks from [/[Default VFS]/] >[2011/12/15 11:45:30.715013, 10] smbd/vfs.c:53(vfs_find_backend_entry) > vfs_find_backend_entry called for /[Default VFS]/ > Successfully loaded vfs module [/[Default VFS]/] with the new modules system >[2011/12/15 11:45:30.715103, 5] smbd/connection.c:134(claim_connection) > claiming [public] >[2011/12/15 11:45:30.715250, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key DF110000FFFFFFFF1759 >[2011/12/15 11:45:30.715323, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x221122a8 >[2011/12/15 11:45:30.715862, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key DF110000FFFFFFFF1759 >[2011/12/15 11:45:30.716083, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service public, connectpath = /mnt/public >[2011/12/15 11:45:30.716156, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:45:30.716223, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:45:30.716299, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:30.716378, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:30.716446, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.716511, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:30.716748, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:45:30.716869, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:45:30.716938, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.716999, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:30.717058, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:30.717156, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:45:30.717228, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service public, connectpath = /mnt/public >[2011/12/15 11:45:30.717310, 1] smbd/service.c:1089(make_connection_snum) > 81.95.129.43 (81.95.129.43) connect to service public initially as user nobody (uid=65534, gid=65534) (pid 4575) >[2011/12/15 11:45:30.717406, 3] smbd/reply.c:871(reply_tcon_and_X) > tconX service=PUBLIC >[2011/12/15 11:45:30.719833, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 76 >[2011/12/15 11:45:30.719907, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x4c >[2011/12/15 11:45:30.719967, 3] smbd/process.c:1661(process_smb) > Transaction 2 of length 80 (0 toread) >[2011/12/15 11:45:30.720028, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.720064, 5] lib/util.c:342(show_msg) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=128 > smt_wct=15 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 8 (0x8) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=11 >[2011/12/15 11:45:30.720734, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 EC 03 00 00 00 00 00 00 ........ ... >[2011/12/15 11:45:30.720816, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:30.720879, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:45:30.720943, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:45:30.721019, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:30.721096, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:30.721163, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:30.721226, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:30.721466, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:45:30.721587, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:45:30.721654, 4] smbd/vfs.c:780(vfs_ChDir) > vfs_ChDir to /mnt/public >[2011/12/15 11:45:30.721739, 3] smbd/trans2.c:5116(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 >[2011/12/15 11:45:30.721826, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "" >[2011/12/15 11:45:30.721893, 5] smbd/filename.c:291(unix_convert) > conversion finished "" -> . >[2011/12/15 11:45:30.721957, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:30.722023, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:30.722085, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:30.722154, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/. hash 0x7d1a2559 >[2011/12/15 11:45:30.722237, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:30.722304, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 >[2011/12/15 11:45:30.722372, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: . (fnum = -1) level=1004 max_data=40 >[2011/12/15 11:45:30.722462, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: . >[2011/12/15 11:45:30.722572, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:30.722651, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:30.722739, 10] smbd/trans2.c:4457(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_BASIC_INFORMATION >[2011/12/15 11:45:30.722814, 5] smbd/trans2.c:4467(smbd_do_qfilepathinfo) > SMB_QFBI - create: Thu Dec 15 11:44:23 2011 > access: Thu Dec 15 11:44:24 2011 > write: Thu Dec 15 11:44:23 2011 > change: Thu Dec 15 11:44:23 2011 > mode: 10 >[2011/12/15 11:45:30.723066, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 16582 >[2011/12/15 11:45:30.723141, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 >[2011/12/15 11:45:30.723214, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.723257, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=128 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=45 >[2011/12/15 11:45:30.723910, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 80 25 9A 5C FD BA CC 01 00 BC 32 ......%. \......2 > [0010] 5D FD BA CC 01 80 25 9A 5C FD BA CC 01 80 25 9A ].....%. \.....%. > [0020] 5C FD BA CC 01 10 00 00 00 00 00 00 00 \....... ..... >[2011/12/15 11:45:30.727762, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 86 >[2011/12/15 11:45:30.727921, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x56 >[2011/12/15 11:45:30.727995, 3] smbd/process.c:1661(process_smb) > Transaction 3 of length 90 (0 toread) >[2011/12/15 11:45:30.728066, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.728109, 5] lib/util.c:342(show_msg) > size=86 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=192 > smt_wct=15 > smb_vwv[ 0]= 18 (0x12) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 18 (0x12) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=21 >[2011/12/15 11:45:30.728900, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 06 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 2A 00 00 00 .*... >[2011/12/15 11:45:30.729091, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:30.729168, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:30.729264, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:45:30.729354, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "*" >[2011/12/15 11:45:30.729436, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [*] >[2011/12/15 11:45:30.729517, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = *, dirpath = , start = * >[2011/12/15 11:45:30.729597, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled * ? >[2011/12/15 11:45:30.729671, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component * (len 1) ? >[2011/12/15 11:45:30.729744, 5] smbd/filename.c:609(unix_convert) > Wildcard * >[2011/12/15 11:45:30.729817, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [*] [/mnt/public] >[2011/12/15 11:45:30.729950, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [*] -> [/mnt/public/*] >[2011/12/15 11:45:30.730025, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: * reduced to /mnt/public/* >[2011/12/15 11:45:30.730098, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = * >[2011/12/15 11:45:30.730181, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:45:30.730254, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:30.730331, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:30.730403, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:30.730551, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:45:30.730631, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = *, attr = 22 >[2011/12/15 11:45:30.730704, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:45:30.730788, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x221080d0 now at offset 0 >[2011/12/15 11:45:30.730889, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./. >[2011/12/15 11:45:30.730964, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:30.731038, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:30.731132, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:30.731205, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./. fname=. (.) >[2011/12/15 11:45:30.731289, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:45:30.731362, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:30.731448, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x221080d0 now at offset -2147483648 >[2011/12/15 11:45:30.731539, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./.. >[2011/12/15 11:45:30.731613, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:30.731687, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:30.731782, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:30.731856, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..) >[2011/12/15 11:45:30.731934, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16288 >[2011/12/15 11:45:30.732006, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:30.732125, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x221080d0 now at offset 909579444 >[2011/12/15 11:45:30.732221, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:45:30.732295, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:30.732369, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:30.732464, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:30.732538, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:45:30.732621, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16188 >[2011/12/15 11:45:30.732694, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:30.732777, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x221080d0 now at offset 1415180083 >[2011/12/15 11:45:30.732902, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./lost+found >[2011/12/15 11:45:30.732977, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:30.733051, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:30.733140, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:30.733213, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./lost+found fname=lost+found (lost+found) >[2011/12/15 11:45:30.733292, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16068 >[2011/12/15 11:45:30.733364, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:30.733459, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: lost+found -> 09085312 -> L2I81E~A (cache=1) >[2011/12/15 11:45:30.733547, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x221080d0 now at offset 2147483647 >[2011/12/15 11:45:30.733638, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_folder >[2011/12/15 11:45:30.733712, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:30.733786, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:30.733882, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:30.733955, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./test_folder fname=test_folder (test_folder) >[2011/12/15 11:45:30.734033, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 15952 >[2011/12/15 11:45:30.734106, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:30.734189, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: test_folder -> 2B55F808 -> TC0VAQ~0 (cache=1) >[2011/12/15 11:45:30.734275, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x221080d0 now at offset -1 >[2011/12/15 11:45:30.734347, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:45:30.734420, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:45:30.734566, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 548, useable_space = 16582 >[2011/12/15 11:45:30.734641, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 548, paramsize = 10, datasize = 548 >[2011/12/15 11:45:30.734714, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.734757, 5] lib/util.c:342(show_msg) > size=616 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=192 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 548 (0x224) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 548 (0x224) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=561 >[2011/12/15 11:45:30.735412, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 05 00 01 00 00 00 B0 01 00 00 60 00 00 ........ .....`.. > [0010] 00 00 00 00 00 80 25 9A 5C FD BA CC 01 00 BC 32 ......%. \......2 > [0020] 5D FD BA CC 01 80 25 9A 5C FD BA CC 01 80 25 9A ].....%. \.....%. > [0030] 5C FD BA CC 01 00 00 00 00 00 00 00 00 00 00 00 \....... ........ > [0040] 00 00 00 00 00 10 00 00 00 02 00 00 00 00 00 00 ........ ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 2E 00 64 00 00 ........ .....d.. > [0070] 00 00 00 00 00 00 7C 7F 87 F3 BA CC 01 80 C6 DC ......|. ........ > [0080] 8C F3 BA CC 01 00 7C 7F 87 F3 BA CC 01 00 7C 7F ......|. ......|. > [0090] 87 F3 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [00A0] 00 00 00 00 00 10 00 00 00 04 00 00 00 00 00 00 ........ ........ > [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [00C0] 00 00 00 00 00 00 00 00 00 00 00 2E 00 2E 00 00 ........ ........ > [00D0] 00 78 00 00 00 00 00 00 00 00 B4 A2 37 F7 BA CC .x...... ....7... > [00E0] 01 00 BC 32 5D FD BA CC 01 00 B4 A2 37 F7 BA CC ...2]... ....7... > [00F0] 01 00 B4 A2 37 F7 BA CC 01 AA 5B 03 00 00 00 00 ....7... ..[..... > [0100] 00 00 00 10 00 00 00 00 00 20 00 00 00 18 00 00 ........ . ...... > [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 ........ .......t > [0130] 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 00 2E .e.s.t._ .i.m.g.. > [0140] 00 62 00 6D 00 70 00 00 00 74 00 00 00 00 00 00 .b.m.p.. .t...... > [0150] 00 00 2D B5 D1 F4 BA CC 01 00 A7 00 C4 F6 BA CC ..-..... ........ > [0160] 01 00 2D B5 D1 F4 BA CC 01 00 2D B5 D1 F4 BA CC ..-..... ..-..... > [0170] 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0180] 00 10 00 00 00 14 00 00 00 00 00 00 00 10 00 4C ........ .......L > [0190] 00 32 00 49 00 38 00 31 00 45 00 7E 00 41 00 00 .2.I.8.1 .E.~.A.. > [01A0] 00 00 00 00 00 00 00 6C 00 6F 00 73 00 74 00 2B .......l .o.s.t.+ > [01B0] 00 66 00 6F 00 75 00 6E 00 64 00 00 00 74 00 00 .f.o.u.n .d...t.. > [01C0] 00 00 00 00 00 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [01D0] 93 F6 BA CC 01 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [01E0] 93 F6 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [01F0] 00 00 00 00 00 10 00 00 00 16 00 00 00 00 00 00 ........ ........ >[2011/12/15 11:45:30.737767, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=* directory=. dirtype=22 numentries=5 >[2011/12/15 11:45:30.737877, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: * -> 0A877AA5 -> _2X68P~X (cache=1) >[2011/12/15 11:45:30.855372, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:45:30.855518, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:45:30.855583, 3] smbd/process.c:1661(process_smb) > Transaction 4 of length 104 (0 toread) >[2011/12/15 11:45:30.855646, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.855682, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=256 > smt_wct=15 > smb_vwv[ 0]= 32 (0x20) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 32 (0x20) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=35 >[2011/12/15 11:45:30.856351, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 EC 03 00 00 00 00 5C 00 64 00 65 00 73 ........ .\.d.e.s > [0010] 00 6B 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 .k.t.o.p ...i.n.i > [0020] 00 00 00 ... >[2011/12/15 11:45:30.856525, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:30.856588, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:30.856653, 3] smbd/trans2.c:5116(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 >[2011/12/15 11:45:30.856724, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "desktop.ini" >[2011/12/15 11:45:30.856790, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [DESKTOP.INI] >[2011/12/15 11:45:30.856879, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = desktop.ini, dirpath = , start = desktop.ini >[2011/12/15 11:45:30.856947, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled desktop.ini ? >[2011/12/15 11:45:30.857008, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component desktop.ini (len 11) ? >[2011/12/15 11:45:30.857072, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled desktop.ini ? >[2011/12/15 11:45:30.857132, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component desktop.ini (len 11) ? >[2011/12/15 11:45:30.857235, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled desktop.ini ? >[2011/12/15 11:45:30.857297, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component desktop.ini (len 11) ? >[2011/12/15 11:45:30.857358, 5] smbd/filename.c:781(unix_convert) > New file desktop.ini >[2011/12/15 11:45:30.857419, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [desktop.ini] [/mnt/public] >[2011/12/15 11:45:30.857500, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [desktop.ini] -> [/mnt/public/desktop.ini] >[2011/12/15 11:45:30.857561, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: desktop.ini reduced to /mnt/public/desktop.ini >[2011/12/15 11:45:30.857625, 3] smbd/trans2.c:5228(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: SMB_VFS_STAT of desktop.ini failed (No such file or directory) >[2011/12/15 11:45:30.857871, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/trans2.c(5230) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:30.857940, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.857978, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=256 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:30.858292, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:30.864475, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 86 >[2011/12/15 11:45:30.864547, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x56 >[2011/12/15 11:45:30.864608, 3] smbd/process.c:1661(process_smb) > Transaction 5 of length 90 (0 toread) >[2011/12/15 11:45:30.864669, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.864705, 5] lib/util.c:342(show_msg) > size=86 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=320 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=3 >[2011/12/15 11:45:30.865584, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 ... >[2011/12/15 11:45:30.865661, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:30.865723, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:30.865792, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 root_dir_fid = 0x0, fname = >[2011/12/15 11:45:30.865864, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "" >[2011/12/15 11:45:30.865929, 5] smbd/filename.c:291(unix_convert) > conversion finished "" -> . >[2011/12/15 11:45:30.865989, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:30.866072, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:30.866133, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:30.866198, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . >[2011/12/15 11:45:30.866272, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:30.866337, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:30.866398, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:30.866476, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . >[2011/12/15 11:45:30.866551, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:30.866621, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file . >[2011/12/15 11:45:30.866788, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:30.866856, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:45:30.866931, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:45:30.867088, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:30.867207, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:45:30.867446, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:30.867509, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:45:30.867571, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:45:30.867640, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file . requesting 0x100001 returning 0x100001 (NT_STATUS_OK) >[2011/12/15 11:45:30.867709, 5] smbd/files.c:126(file_new) > allocated file structure 13381, fnum = 17477 (1 used) >[2011/12/15 11:45:30.867778, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/. hash 0x7d1a2559 >[2011/12/15 11:45:30.867844, 10] smbd/open.c:179(fd_open) > fd_open: name ., flags = 0600000 mode = 00, fd = 27. >[2011/12/15 11:45:30.867919, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:45:30.867992, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22125550 >[2011/12/15 11:45:30.868066, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:44:23 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 1 >[2011/12/15 11:45:30.868173, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0x140, type= 0x0, gen_id = 1, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:45:30.868459, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:45:30.868544, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:45:30.868605, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:45:30.868667, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: . >[2011/12/15 11:45:30.868730, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:30.868791, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:30.868861, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:44:23 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:30.868959, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0x140, type= 0x0, gen_id = 1, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:45:30.869033, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 17477, open name = . >[2011/12/15 11:45:30.872475, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 84 >[2011/12/15 11:45:30.872549, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x54 >[2011/12/15 11:45:30.872611, 3] smbd/process.c:1661(process_smb) > Transaction 6 of length 88 (0 toread) >[2011/12/15 11:45:30.872672, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.872708, 5] lib/util.c:342(show_msg) > size=84 > smb_com=0xa0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=384 > smt_wct=23 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 8192 (0x2000) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]=21504 (0x5400) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 1024 (0x400) > smb_vwv[18]= 4 (0x4) > smb_vwv[19]= 23 (0x17) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=17477 (0x4445) > smb_vwv[22]= 0 (0x0) > smb_bcc=3 >[2011/12/15 11:45:30.873572, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 ... >[2011/12/15 11:45:30.873649, 3] smbd/process.c:1466(switch_message) > switch message SMBnttrans (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:30.873711, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:30.873779, 10] smbd/nttrans.c:3079(reply_nttrans) > num_setup=8, param_total=0, this_param=0, max_param=32, data_total=0, this_data=0, max_data=0, param_offset=84, data_offset=0 >[2011/12/15 11:45:30.873844, 10] smbd/nttrans.c:3151(reply_nttrans) > reply_nttrans: state->setup_count = 8 >[2011/12/15 11:45:30.873905, 10] ../lib/util/util.c:415(dump_data) > [0000] 17 00 00 00 45 44 00 00 ....ED.. >[2011/12/15 11:45:30.873990, 3] smbd/nttrans.c:1703(call_nt_transact_notify_change) > call_nt_transact_notify_change >[2011/12/15 11:45:30.874061, 3] smbd/nttrans.c:1720(call_nt_transact_notify_change) > call_nt_transact_notify_change: notify change called on ., filter = FILE_NAME|DIR_NAME|ATTRIBUTES|LAST_WRITE, recursive = 0 >[2011/12/15 11:45:30.874143, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 6E6F7469667920617272 >[2011/12/15 11:45:30.874212, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22112430 >[2011/12/15 11:45:30.874314, 10] smbd/notify_inotify.c:416(inotify_watch) > inotify_add_watch for /mnt/public mask 210003c6 returned wd 1 >[2011/12/15 11:45:30.874398, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 6E6F7469667920617272 >[2011/12/15 11:45:30.874480, 10] smbd/notify.c:228(change_notify_add_request) > change_notify_add_request: Adding request for .: max_param = 32 >[2011/12/15 11:45:30.988431, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 104 >[2011/12/15 11:45:30.988577, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x68 >[2011/12/15 11:45:30.988641, 3] smbd/process.c:1661(process_smb) > Transaction 7 of length 108 (0 toread) >[2011/12/15 11:45:30.988702, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.988738, 5] lib/util.c:342(show_msg) > size=104 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=449 > smt_wct=15 > smb_vwv[ 0]= 36 (0x24) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 36 (0x24) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=39 >[2011/12/15 11:45:30.989410, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F 00 75 .l.o.s.t .+.f.o.u > [0020] 00 6E 00 64 00 00 00 .n.d... >[2011/12/15 11:45:30.989598, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:30.989662, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:30.989731, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:45:30.989806, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:30.989873, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [LOST+FOUND] >[2011/12/15 11:45:30.989935, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = lost+found, dirpath = , start = lost+found >[2011/12/15 11:45:30.990015, 5] smbd/statcache.c:143(stat_cache_add) > stat_cache_add: Added entry (221268d8:size a) LOST+FOUND -> lost+found >[2011/12/15 11:45:30.990077, 5] smbd/filename.c:439(unix_convert) > conversion of base_name finished lost+found -> lost+found >[2011/12/15 11:45:30.990139, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:30.990214, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:30.990276, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:30.990338, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = lost+found >[2011/12/15 11:45:30.990403, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:45:30.990480, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:30.990545, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:30.990606, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:30.990685, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:45:30.990748, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = lost+found, attr = 22 >[2011/12/15 11:45:30.990809, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:45:30.990886, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x22105b08 now at offset -1 >[2011/12/15 11:45:30.990980, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./lost+found >[2011/12/15 11:45:30.991045, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:30.991106, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:30.991184, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:30.991246, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[lost+found] found ./lost+found fname=lost+found (lost+found) >[2011/12/15 11:45:30.991313, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:45:30.991375, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:30.991446, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: lost+found -> 09085312 -> L2I81E~A (cache=1) >[2011/12/15 11:45:30.991513, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:45:30.991574, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:45:30.991644, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 16582 >[2011/12/15 11:45:30.991706, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116 >[2011/12/15 11:45:30.991766, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.991803, 5] lib/util.c:342(show_msg) > size=184 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=449 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 116 (0x74) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 116 (0x74) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=129 >[2011/12/15 11:45:30.992353, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 74 00 00 ........ .....t.. > [0010] 00 00 00 00 00 00 2D B5 D1 F4 BA CC 01 00 A7 00 ......-. ........ > [0020] C4 F6 BA CC 01 00 2D B5 D1 F4 BA CC 01 00 2D B5 ......-. ......-. > [0030] D1 F4 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0040] 00 00 00 00 00 10 00 00 00 14 00 00 00 00 00 00 ........ ........ > [0050] 00 10 00 4C 00 32 00 49 00 38 00 31 00 45 00 7E ...L.2.I .8.1.E.~ > [0060] 00 41 00 00 00 00 00 00 00 00 00 6C 00 6F 00 73 .A...... ...l.o.s > [0070] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 00 .t.+.f.o .u.n.d.. > [0080] 00 . >[2011/12/15 11:45:30.992822, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=lost+found directory=. dirtype=22 numentries=1 >[2011/12/15 11:45:30.992888, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: lost+found -> 09085312 -> L2I81E~A (cache=1) >[2011/12/15 11:45:30.995838, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:30.995910, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:30.995971, 3] smbd/process.c:1661(process_smb) > Transaction 8 of length 112 (0 toread) >[2011/12/15 11:45:30.996031, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:30.996067, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=513 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:30.996969, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:30.997098, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:30.997160, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:30.997224, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:30.997291, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:30.997355, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:30.997422, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:30.997497, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:30.997558, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:30.997620, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:30.997689, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:30.997758, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:30.997819, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:30.997880, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:30.997950, 5] smbd/files.c:126(file_new) > allocated file structure 13382, fnum = 17478 (2 used) >[2011/12/15 11:45:30.998018, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:30.998082, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:30.998144, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:30.998211, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:30.998280, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:30.998340, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:30.998401, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:30.998472, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:30.998534, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:30.998601, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:30.998677, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:30.998773, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:30.998835, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:30.998900, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:30.998983, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:30.999049, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:30.999116, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:30.999178, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:30.999246, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:30.999317, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:30.999384, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:30.999449, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:30.999524, 5] smbd/files.c:464(file_free) > freed files structure 17478 (1 used) >[2011/12/15 11:45:30.999587, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:30.999654, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:30.999746, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:30.999809, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:30.999879, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.000008, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.000123, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.000363, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.000428, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.000489, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.000560, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.000625, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.000689, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.002908, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.002972, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.003033, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.003095, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.003159, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.003195, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=513 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.003511, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.006531, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.006605, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.006667, 3] smbd/process.c:1661(process_smb) > Transaction 9 of length 112 (0 toread) >[2011/12/15 11:45:31.006727, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.006764, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=577 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.007648, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.007778, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.007840, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.007905, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.007972, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.008036, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.008103, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.008174, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.008235, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.008297, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.008364, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.008450, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.008512, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.008573, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.008643, 5] smbd/files.c:126(file_new) > allocated file structure 13383, fnum = 17479 (2 used) >[2011/12/15 11:45:31.008711, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.008775, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.008836, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.008902, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.008971, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.009031, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.009093, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.009154, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.009215, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.009278, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.009350, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.009417, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.009484, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.009549, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.009632, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.009698, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.009761, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.009824, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.009891, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.009956, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.010019, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.010084, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.010159, 5] smbd/files.c:464(file_free) > freed files structure 17479 (1 used) >[2011/12/15 11:45:31.010222, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.010288, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.010373, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.010460, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.010530, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.010647, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.010758, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.010996, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.011061, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.011122, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.011191, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.011256, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.011317, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.013452, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.013518, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.013579, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.013640, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.013704, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.013740, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=577 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.014057, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.016034, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.016107, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.016168, 3] smbd/process.c:1661(process_smb) > Transaction 10 of length 112 (0 toread) >[2011/12/15 11:45:31.016229, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.016265, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=641 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.017173, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.017304, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.017367, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.017431, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.017504, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.017569, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.017635, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.017706, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.017768, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.017829, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.017897, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.017968, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.018029, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.018090, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.018160, 5] smbd/files.c:126(file_new) > allocated file structure 13384, fnum = 17480 (2 used) >[2011/12/15 11:45:31.018228, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.018292, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.018354, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.018419, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.018497, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.018558, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.018619, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.018681, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.018742, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.018804, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.018895, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.018963, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.019025, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.019089, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.019172, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.019238, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.019301, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.019363, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.019431, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.019495, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.019558, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.019623, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.019697, 5] smbd/files.c:464(file_free) > freed files structure 17480 (1 used) >[2011/12/15 11:45:31.019760, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.019827, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.019911, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.019973, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.020042, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.020158, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.020268, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.020505, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.020569, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.020630, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.020699, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.020763, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.020824, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.023184, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.023284, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.023357, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.023434, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.023510, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.023554, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=641 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.023930, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.026811, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.026967, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.027042, 3] smbd/process.c:1661(process_smb) > Transaction 11 of length 112 (0 toread) >[2011/12/15 11:45:31.027115, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.027158, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=705 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.028209, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.028410, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.028489, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.028571, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.028655, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.028736, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.028819, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.028908, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.028981, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.029056, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.029173, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.029258, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.029331, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.029404, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.029495, 5] smbd/files.c:126(file_new) > allocated file structure 13385, fnum = 17481 (2 used) >[2011/12/15 11:45:31.029578, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.029656, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.029730, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.029812, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.029902, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.029975, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.030049, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.030123, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.030198, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.030274, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.030368, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.030483, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.030558, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.030636, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.030747, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.030827, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.030903, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.030978, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.031066, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.031145, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.031221, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.031302, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.031402, 5] smbd/files.c:464(file_free) > freed files structure 17481 (1 used) >[2011/12/15 11:45:31.031479, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.031560, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.031707, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.031783, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.031870, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.032032, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.032176, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.032480, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.032563, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.032636, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.032724, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.032803, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.032875, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.035553, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.035651, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.035725, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.035802, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.035878, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.035922, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=705 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.036308, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.039044, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.039217, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.039294, 3] smbd/process.c:1661(process_smb) > Transaction 12 of length 112 (0 toread) >[2011/12/15 11:45:31.039367, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.039411, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=769 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.040528, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.040729, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.040807, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.040890, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.040973, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.041053, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.041136, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.041225, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.041299, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.041373, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.041460, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.041546, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.041619, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.041693, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.041783, 5] smbd/files.c:126(file_new) > allocated file structure 13386, fnum = 17482 (2 used) >[2011/12/15 11:45:31.041865, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.041944, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.042018, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.042101, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.042189, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.042261, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.042335, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.042409, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.042509, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.042617, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.042713, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.042806, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.042879, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.042958, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.043068, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.043150, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.043226, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.043301, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.043390, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.043469, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.043545, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.043625, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.043726, 5] smbd/files.c:464(file_free) > freed files structure 17482 (1 used) >[2011/12/15 11:45:31.043803, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.043884, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.044004, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.044080, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.044166, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.044330, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.044473, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.044778, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.044860, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.044932, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.045021, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.045099, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.045172, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.047896, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.047993, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.048066, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.048144, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.048220, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.048264, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=769 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.048641, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.050895, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.051051, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.051126, 3] smbd/process.c:1661(process_smb) > Transaction 13 of length 112 (0 toread) >[2011/12/15 11:45:31.051204, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.051244, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=833 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.052137, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.052270, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.052334, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.052403, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.052473, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.052541, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.052611, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.052684, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.052747, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.052809, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.052902, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.052972, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.053033, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.053094, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.053166, 5] smbd/files.c:126(file_new) > allocated file structure 13387, fnum = 17483 (2 used) >[2011/12/15 11:45:31.053235, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.053301, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.053363, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.053430, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.053505, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.053566, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.053628, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.053690, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.053752, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.053815, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.053889, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.053964, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.054026, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.054091, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.054175, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.054242, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.054306, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.054369, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.054440, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.054518, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.054583, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.054649, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.054724, 5] smbd/files.c:464(file_free) > freed files structure 17483 (1 used) >[2011/12/15 11:45:31.054788, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.054854, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.054966, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.055029, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.055100, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.055224, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.055338, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.055578, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.055642, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.055704, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.055775, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.055841, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.055902, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.058046, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.058110, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.058171, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.058234, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.058297, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.058333, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=833 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.058660, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.061469, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.061545, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.061606, 3] smbd/process.c:1661(process_smb) > Transaction 14 of length 112 (0 toread) >[2011/12/15 11:45:31.061667, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.061704, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=897 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.062616, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.062747, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.062810, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.062876, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.062944, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.063008, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.063076, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.063147, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.063208, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.063270, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.063338, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.063407, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.063468, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.063529, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.063599, 5] smbd/files.c:126(file_new) > allocated file structure 13388, fnum = 17484 (2 used) >[2011/12/15 11:45:31.063667, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.063731, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.063792, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.063861, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.063929, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.063990, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.064051, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.064113, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.064192, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.064255, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.064327, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.064396, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.064458, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.064522, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.064605, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.064672, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.064734, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.064797, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.064865, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.064929, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.064993, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.065058, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.065132, 5] smbd/files.c:464(file_free) > freed files structure 17484 (1 used) >[2011/12/15 11:45:31.065195, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.065261, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.065348, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.065410, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.065484, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.065603, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.065714, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.065951, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.066015, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.066077, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.066146, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.066211, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.066290, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.068432, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.068495, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.068556, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.068618, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.068681, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.068718, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=897 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.069035, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.072073, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.072146, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.072208, 3] smbd/process.c:1661(process_smb) > Transaction 15 of length 112 (0 toread) >[2011/12/15 11:45:31.072268, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.072304, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=961 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.073190, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.073320, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.073382, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.073448, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.073519, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.073583, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.073650, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.073720, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.073782, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.073843, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.073930, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.073999, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.074060, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.074121, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.074191, 5] smbd/files.c:126(file_new) > allocated file structure 13389, fnum = 17485 (2 used) >[2011/12/15 11:45:31.074259, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.074322, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.074384, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.074458, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.074527, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.074587, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.074649, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.074710, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.074772, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.074834, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.074906, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.074974, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.075035, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.075099, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.075182, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.075248, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.075310, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.075373, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.075441, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.075505, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.075568, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.075633, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.075708, 5] smbd/files.c:464(file_free) > freed files structure 17485 (1 used) >[2011/12/15 11:45:31.075771, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.075854, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.075941, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.076003, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.076072, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.076189, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.076299, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.076536, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.076601, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.076662, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.076731, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.076795, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.076857, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.079008, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.079072, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.079133, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.079194, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.079258, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.079294, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=961 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.079610, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.082650, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.082723, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.082785, 3] smbd/process.c:1661(process_smb) > Transaction 16 of length 112 (0 toread) >[2011/12/15 11:45:31.082846, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.082882, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1025 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.083784, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.083914, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.083977, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.084041, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.084108, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.084172, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.084239, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.084309, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.084371, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.084433, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.084500, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.084569, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.084630, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.084691, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.084761, 5] smbd/files.c:126(file_new) > allocated file structure 13390, fnum = 17486 (2 used) >[2011/12/15 11:45:31.084829, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.084893, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.084955, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.085020, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.085089, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.085150, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.085211, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.085289, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.085352, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.085415, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.085492, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.085561, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.085622, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.085687, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.085770, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.085836, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.085899, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.085961, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.086030, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.086094, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.086157, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.086223, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.086297, 5] smbd/files.c:464(file_free) > freed files structure 17486 (1 used) >[2011/12/15 11:45:31.086360, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.086427, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.086522, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.086584, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.086653, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.086770, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.086881, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.087118, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.087182, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.087244, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.087313, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.087377, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.087457, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.089599, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.089663, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.089724, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.089786, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.089850, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.089886, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1025 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.090203, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.093246, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.093318, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.093380, 3] smbd/process.c:1661(process_smb) > Transaction 17 of length 112 (0 toread) >[2011/12/15 11:45:31.093441, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.093483, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1089 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.094373, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.094512, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.094575, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.094639, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.094706, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.094771, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.094838, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.094908, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.094969, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.095048, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.095117, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.095186, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.095247, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.095308, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.095378, 5] smbd/files.c:126(file_new) > allocated file structure 13391, fnum = 17487 (2 used) >[2011/12/15 11:45:31.095446, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.095510, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.095572, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.095637, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.095706, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.095766, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.095827, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.095889, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.095951, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.096013, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.096085, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.096153, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.096214, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.096278, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.096361, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.096428, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.096490, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.096553, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.096621, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.096685, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.096748, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.096813, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.096888, 5] smbd/files.c:464(file_free) > freed files structure 17487 (1 used) >[2011/12/15 11:45:31.096951, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.097035, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.097120, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.097181, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.097251, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.097367, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.097483, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.097721, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.097785, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.097846, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.097915, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.097980, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.098041, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.100183, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.100246, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.100307, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.100368, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.100431, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.100468, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1089 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.100784, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.103953, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.104027, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.104088, 3] smbd/process.c:1661(process_smb) > Transaction 18 of length 112 (0 toread) >[2011/12/15 11:45:31.104149, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.104185, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1153 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.105089, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.105218, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.105281, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.105345, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.105412, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.105481, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.105548, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.105618, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.105679, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.105741, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.105808, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.105877, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.105938, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.105999, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.106069, 5] smbd/files.c:126(file_new) > allocated file structure 13392, fnum = 17488 (2 used) >[2011/12/15 11:45:31.106137, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.106200, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.106262, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.106327, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.106396, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.106466, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.106544, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.106607, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.106669, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.106731, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.106804, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.106872, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.106933, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.106997, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.107079, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.107146, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.107208, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.107270, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.107338, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.107403, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.107466, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.107530, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.107605, 5] smbd/files.c:464(file_free) > freed files structure 17488 (1 used) >[2011/12/15 11:45:31.107668, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.107734, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.107818, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.107880, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.107949, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.108065, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.108175, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.108412, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.108475, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.108537, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.108605, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.108686, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.108748, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.110896, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.110960, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.111020, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.111082, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.111145, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.111182, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1153 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.111499, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.114521, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.114595, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.114656, 3] smbd/process.c:1661(process_smb) > Transaction 19 of length 112 (0 toread) >[2011/12/15 11:45:31.114717, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.114753, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1217 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.115653, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.115783, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.115846, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.115910, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.115977, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.116042, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.116108, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.116178, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.116240, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.116318, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.116386, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.116455, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.116516, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.116577, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.116646, 5] smbd/files.c:126(file_new) > allocated file structure 13393, fnum = 17489 (2 used) >[2011/12/15 11:45:31.116714, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.116777, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.116839, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.116904, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.116974, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.117034, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.117095, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.117156, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.117218, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.117280, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.117352, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.117420, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.117487, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.117551, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.117634, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.117701, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.117764, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.117826, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.117893, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.117958, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.118021, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.118085, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.118160, 5] smbd/files.c:464(file_free) > freed files structure 17489 (1 used) >[2011/12/15 11:45:31.118239, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.118305, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.118390, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.118463, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.118533, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.118650, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.118761, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.118998, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.119061, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.119123, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.119191, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.119256, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.119317, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.121451, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.121517, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.121578, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.121639, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.121703, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.121739, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1217 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.122056, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.125126, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.125285, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.125360, 3] smbd/process.c:1661(process_smb) > Transaction 20 of length 112 (0 toread) >[2011/12/15 11:45:31.125433, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.125478, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1281 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.126585, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.126785, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.126862, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.126944, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.127028, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.127108, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.127191, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.127280, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.127353, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.127428, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.127514, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.127597, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.127671, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.127744, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.127832, 5] smbd/files.c:126(file_new) > allocated file structure 13394, fnum = 17490 (2 used) >[2011/12/15 11:45:31.127914, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.127993, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.128066, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.128147, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.128235, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.128307, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.128411, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.128485, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.128559, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.128636, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.128728, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.128820, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.128894, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.128973, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.129083, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.129164, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.129240, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.129315, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.129403, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.129484, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.129561, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.129642, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.129740, 5] smbd/files.c:464(file_free) > freed files structure 17490 (1 used) >[2011/12/15 11:45:31.129818, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.129900, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.130019, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.130094, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.130180, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.130340, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.130507, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.130810, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.130891, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.130963, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.131051, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.131170, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.131243, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.133899, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.133997, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.134070, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.134147, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.134223, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.134266, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1281 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.134665, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.137093, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.137251, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.137325, 3] smbd/process.c:1661(process_smb) > Transaction 21 of length 112 (0 toread) >[2011/12/15 11:45:31.137398, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.137442, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1345 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.138517, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.138717, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.138794, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.138876, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.138959, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.139039, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.139122, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.139212, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.139320, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.139394, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.139480, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.139564, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.139636, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.139709, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.139799, 5] smbd/files.c:126(file_new) > allocated file structure 13395, fnum = 17491 (2 used) >[2011/12/15 11:45:31.139882, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.139959, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.140033, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.140114, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.140201, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.140274, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.140347, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.140421, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.140496, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.140571, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.140664, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.140756, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.140830, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.140908, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.141019, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.141100, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.141177, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.141251, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.141339, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.141417, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.141495, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.141576, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.141705, 5] smbd/files.c:464(file_free) > freed files structure 17491 (1 used) >[2011/12/15 11:45:31.141782, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.141863, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.141981, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.142056, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.142142, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.142303, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.142467, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.142774, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.142854, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.142927, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.143014, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.143094, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.143167, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.145827, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.145924, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.145997, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.146075, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.146151, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.146195, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1345 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.146593, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.149320, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.149475, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.149550, 3] smbd/process.c:1661(process_smb) > Transaction 22 of length 112 (0 toread) >[2011/12/15 11:45:31.149651, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.149696, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1409 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.150761, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.150913, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.150978, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.151047, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.151116, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.151184, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.151254, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.151328, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.151390, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.151453, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.151522, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.151591, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.151652, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.151713, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.151785, 5] smbd/files.c:126(file_new) > allocated file structure 13396, fnum = 17492 (2 used) >[2011/12/15 11:45:31.151854, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.151919, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.151981, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.152047, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.152116, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.152202, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.152264, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.152326, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.152388, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.152451, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.152524, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.152599, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.152661, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.152726, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.152809, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.152877, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.152940, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.153005, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.153076, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.153141, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.153205, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.153272, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.153347, 5] smbd/files.c:464(file_free) > freed files structure 17492 (1 used) >[2011/12/15 11:45:31.153410, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.153483, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.153576, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.153639, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.153709, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.153834, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.153947, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.154185, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.154249, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.154310, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.154401, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.154477, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.154538, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.156675, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.156739, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.156799, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.156862, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.156926, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.156962, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1409 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.157279, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.160053, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.160127, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.160189, 3] smbd/process.c:1661(process_smb) > Transaction 23 of length 112 (0 toread) >[2011/12/15 11:45:31.160250, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.160286, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1473 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.161172, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.161302, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.161365, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.161429, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.161501, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.161566, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.161632, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.161719, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.161781, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.161843, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.161910, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.161979, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.162040, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.162101, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.162171, 5] smbd/files.c:126(file_new) > allocated file structure 13397, fnum = 17493 (2 used) >[2011/12/15 11:45:31.162239, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.162302, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.162364, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.162429, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.162507, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.162568, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.162629, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.162690, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.162751, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.162814, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.162886, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.162954, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.163015, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.163079, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.163161, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.163228, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.163290, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.163353, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.163420, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.163485, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.163548, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.163628, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.163704, 5] smbd/files.c:464(file_free) > freed files structure 17493 (1 used) >[2011/12/15 11:45:31.163767, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.163833, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.163918, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.163980, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.164048, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.164164, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.164275, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.164511, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.164574, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.164636, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.164704, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.164769, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.164830, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.166978, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.167042, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.167103, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.167165, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.167228, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.167264, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1473 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.167580, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.170677, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.170751, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.170829, 3] smbd/process.c:1661(process_smb) > Transaction 24 of length 112 (0 toread) >[2011/12/15 11:45:31.170892, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.170928, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1537 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.171819, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.171949, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.172011, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.172076, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.172143, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.172207, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.172274, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.172344, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.172405, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.172467, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.172535, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.172603, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.172664, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.172725, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.172795, 5] smbd/files.c:126(file_new) > allocated file structure 13398, fnum = 17494 (2 used) >[2011/12/15 11:45:31.172863, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.172926, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.172987, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.173053, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.173139, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.173201, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.173262, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.173323, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.173385, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.173448, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.173525, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.173593, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.173654, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.173718, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.173801, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.173867, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.173929, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.173991, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.174068, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.174140, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.174203, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.174268, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.174343, 5] smbd/files.c:464(file_free) > freed files structure 17494 (1 used) >[2011/12/15 11:45:31.174406, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.174482, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.174567, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.174629, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.174698, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.174814, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.174925, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.175161, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.175224, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.175304, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.175373, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.175438, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.175499, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.177636, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.177700, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.177761, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.177822, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.177886, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.177922, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1537 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.178238, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.180191, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.180263, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.180325, 3] smbd/process.c:1661(process_smb) > Transaction 25 of length 112 (0 toread) >[2011/12/15 11:45:31.180385, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.180421, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1601 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.181308, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.181438, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.181506, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.181571, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.181639, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.181703, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.181787, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.181859, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.181920, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.181982, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.182049, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.182118, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.182179, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.182240, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.182310, 5] smbd/files.c:126(file_new) > allocated file structure 13399, fnum = 17495 (2 used) >[2011/12/15 11:45:31.182378, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.182441, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.182512, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.182578, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.182647, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.182707, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.182768, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.182829, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.182891, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.182953, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.183025, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.183093, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.183154, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.183218, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.183300, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.183366, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.183429, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.183491, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.183558, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.183622, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.183685, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.183769, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.183843, 5] smbd/files.c:464(file_free) > freed files structure 17495 (1 used) >[2011/12/15 11:45:31.183906, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.183972, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.184057, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.184119, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.184187, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.184303, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.184413, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.184649, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.184713, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.184774, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.184843, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.184907, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.184968, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.187121, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.187185, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.187245, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.187307, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.187370, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.187406, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1601 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.187723, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.190711, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.190802, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.190865, 3] smbd/process.c:1661(process_smb) > Transaction 26 of length 112 (0 toread) >[2011/12/15 11:45:31.190926, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.190962, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1665 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.191851, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.191981, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.192043, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.192108, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.192175, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.192239, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.192305, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.192375, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.192437, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.192498, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.192565, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.192634, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.192695, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.192756, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.192826, 5] smbd/files.c:126(file_new) > allocated file structure 13400, fnum = 17496 (2 used) >[2011/12/15 11:45:31.192893, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.192956, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.193018, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.193100, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.193169, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.193230, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.193291, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.193352, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.193413, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.193480, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.193553, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.193621, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.193682, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.193746, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.193829, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.193895, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.193957, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.194020, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.194087, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.194151, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.194214, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.194279, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.194354, 5] smbd/files.c:464(file_free) > freed files structure 17496 (1 used) >[2011/12/15 11:45:31.194417, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.194493, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.194578, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.194640, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.194709, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.194825, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.194935, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.195172, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.195253, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.195316, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.195385, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.195449, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.195510, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.197646, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.197710, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.197770, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.197832, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.197895, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.197931, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1665 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.198248, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.201340, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.201413, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.201478, 3] smbd/process.c:1661(process_smb) > Transaction 27 of length 112 (0 toread) >[2011/12/15 11:45:31.201540, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.201576, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1729 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.202472, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.202602, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.202664, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.202729, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.202796, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.202860, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.202943, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.203013, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.203074, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.203136, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.203203, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.203272, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.203333, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.203394, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.203463, 5] smbd/files.c:126(file_new) > allocated file structure 13401, fnum = 17497 (2 used) >[2011/12/15 11:45:31.203531, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.203594, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.203656, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.203721, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.203790, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.203851, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.203912, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.203972, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.204034, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.204096, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.204168, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.204236, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.204297, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.204360, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.204443, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.204510, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.204572, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.204634, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.204702, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.204766, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.204846, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.204911, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.204985, 5] smbd/files.c:464(file_free) > freed files structure 17497 (1 used) >[2011/12/15 11:45:31.205048, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.205114, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.205199, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.205260, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.205329, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.205445, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.205561, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.205798, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.205862, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.205923, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.205992, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.206056, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.206117, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.208256, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.208319, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.208380, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.208441, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.208505, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.208541, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1729 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.208857, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.211909, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.212002, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.212064, 3] smbd/process.c:1661(process_smb) > Transaction 28 of length 112 (0 toread) >[2011/12/15 11:45:31.212124, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.212160, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1793 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.213049, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.213179, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.213242, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.213306, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.213373, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.213437, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.213510, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.213580, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.213642, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.213703, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.213771, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.213840, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.213900, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.213961, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.214031, 5] smbd/files.c:126(file_new) > allocated file structure 13402, fnum = 17498 (2 used) >[2011/12/15 11:45:31.214098, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.214162, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.214223, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.214306, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.214375, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.214436, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.214507, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.214568, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.214630, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.214692, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.214764, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.214832, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.214893, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.214956, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.215039, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.215105, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.215168, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.215230, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.215298, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.215362, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.215425, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.215489, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.215564, 5] smbd/files.c:464(file_free) > freed files structure 17498 (1 used) >[2011/12/15 11:45:31.215627, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.215693, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.215777, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.215839, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.215908, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.216024, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.216134, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.216371, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.216452, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.216513, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.216582, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.216646, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.216707, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.218854, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.218917, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.218978, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.219039, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.219102, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.219139, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1793 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.219455, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.222546, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.222703, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.222777, 3] smbd/process.c:1661(process_smb) > Transaction 29 of length 112 (0 toread) >[2011/12/15 11:45:31.222851, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.222894, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1857 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.223946, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.224146, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.224223, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.224306, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.224390, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.224504, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.224588, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.224677, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.224751, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.224824, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.224910, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.224994, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.225067, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.225139, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.225228, 5] smbd/files.c:126(file_new) > allocated file structure 13403, fnum = 17499 (2 used) >[2011/12/15 11:45:31.225310, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.225389, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.225465, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.225549, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.225636, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.225709, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.225782, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.225856, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.225930, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.226006, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.226099, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.226191, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.226264, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.226342, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.226473, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.226556, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.226632, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.226707, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.226795, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.226902, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.226980, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.227060, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.227160, 5] smbd/files.c:464(file_free) > freed files structure 17499 (1 used) >[2011/12/15 11:45:31.227237, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.227318, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.227436, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.227510, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.227597, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.227759, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.227901, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.228205, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.228288, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.228361, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.228450, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.228529, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.228601, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.231301, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.231399, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.231472, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.231550, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.231628, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.231671, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1857 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.232080, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.234535, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.234692, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.234766, 3] smbd/process.c:1661(process_smb) > Transaction 30 of length 112 (0 toread) >[2011/12/15 11:45:31.234839, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.234883, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1921 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.235979, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.236201, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.236291, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.236375, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.236473, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.236557, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.236639, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.236727, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.236801, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.236875, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.236961, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.237045, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.237118, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.237191, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.237279, 5] smbd/files.c:126(file_new) > allocated file structure 13404, fnum = 17500 (2 used) >[2011/12/15 11:45:31.237362, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.237439, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.237516, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.237628, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.237715, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.237788, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.237861, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.237935, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.238009, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.238085, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.238178, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.238270, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.238343, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.238422, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.238556, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.238639, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.238715, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.238790, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.238878, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.238957, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.239034, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.239114, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.239213, 5] smbd/files.c:464(file_free) > freed files structure 17500 (1 used) >[2011/12/15 11:45:31.239290, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.239371, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.239490, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.239565, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.239651, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.239813, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.239957, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.240293, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.240377, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.240450, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.240539, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.240618, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.240690, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.243362, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.243460, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.243532, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.243609, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.243685, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.243729, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1921 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.244103, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.246544, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.246699, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.246773, 3] smbd/process.c:1661(process_smb) > Transaction 31 of length 112 (0 toread) >[2011/12/15 11:45:31.246846, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.246889, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1985 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.247934, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.248134, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.248213, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.248296, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.248410, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.248492, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.248575, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.248664, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.248737, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.248811, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.248896, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.248979, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.249051, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.249124, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.249212, 5] smbd/files.c:126(file_new) > allocated file structure 13405, fnum = 17501 (2 used) >[2011/12/15 11:45:31.249294, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.249372, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.249446, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.249528, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.249617, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.249689, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.249763, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.249836, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.249911, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.249986, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.250080, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.250171, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.250244, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.250323, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.250434, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.250532, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.250597, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.250660, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.250758, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.250825, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.250889, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.250955, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.251030, 5] smbd/files.c:464(file_free) > freed files structure 17501 (1 used) >[2011/12/15 11:45:31.251094, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.251161, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.251257, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.251319, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.251390, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.251514, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.251628, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.251868, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.251932, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.251993, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.252064, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.252129, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.252190, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.254332, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.254395, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.254466, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.254530, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.254594, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.254631, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1985 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.254964, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.257186, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.257258, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.257319, 3] smbd/process.c:1661(process_smb) > Transaction 32 of length 112 (0 toread) >[2011/12/15 11:45:31.257380, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.257416, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2049 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.258307, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.258439, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.258511, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.258579, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.258647, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.258712, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.258779, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.258852, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.258914, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.258975, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.259043, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.259111, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.259172, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.259233, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.259303, 5] smbd/files.c:126(file_new) > allocated file structure 13406, fnum = 17502 (2 used) >[2011/12/15 11:45:31.259372, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.259436, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.259515, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.259583, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.259651, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.259712, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.259773, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.259834, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.259896, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.259958, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.260030, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.260098, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.260159, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.260223, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.260305, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.260372, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.260435, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.260497, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.260565, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.260629, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.260692, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.260757, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.260831, 5] smbd/files.c:464(file_free) > freed files structure 17502 (1 used) >[2011/12/15 11:45:31.260894, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.260960, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.261044, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.261106, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.261175, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.261291, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.261401, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.261663, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.261727, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.261788, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.261857, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.261922, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.261982, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.264124, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.264187, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.264247, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.264309, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.264372, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.264408, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2049 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.264739, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.267715, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.267789, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.267850, 3] smbd/process.c:1661(process_smb) > Transaction 33 of length 112 (0 toread) >[2011/12/15 11:45:31.267911, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.267947, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2113 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.268834, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.268964, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.269026, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.269090, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.269175, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.269239, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.269306, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.269376, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.269437, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.269504, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.269572, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.269641, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.269702, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.269763, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.269833, 5] smbd/files.c:126(file_new) > allocated file structure 13407, fnum = 17503 (2 used) >[2011/12/15 11:45:31.269900, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.269964, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.270025, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.270090, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.270159, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.270220, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.270281, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.270341, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.270403, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.270474, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.270547, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.270614, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.270675, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.270739, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.270821, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.270887, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.270950, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.271012, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.271097, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.271163, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.271226, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.271290, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.271365, 5] smbd/files.c:464(file_free) > freed files structure 17503 (1 used) >[2011/12/15 11:45:31.271427, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.271494, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.271578, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.271639, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.271708, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.271824, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.271934, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.272171, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.272234, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.272296, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.272364, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.272429, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.272489, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.274634, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.274697, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.274758, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.274819, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.274883, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.274919, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2113 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.275253, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.278264, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.278340, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.278402, 3] smbd/process.c:1661(process_smb) > Transaction 34 of length 112 (0 toread) >[2011/12/15 11:45:31.278472, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.278509, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2177 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.279393, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.279523, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.279585, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.279650, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.279717, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.279781, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.279848, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.279917, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.279979, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.280040, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.280108, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.280176, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.280237, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.280298, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.280367, 5] smbd/files.c:126(file_new) > allocated file structure 13408, fnum = 17504 (2 used) >[2011/12/15 11:45:31.280435, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.280515, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.280578, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.280644, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.280712, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.280773, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.280834, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.280895, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.280957, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.281019, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.281091, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.281159, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.281221, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.281284, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.281367, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.281432, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.281500, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.281563, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.281631, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.281695, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.281758, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.281823, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.281897, 5] smbd/files.c:464(file_free) > freed files structure 17504 (1 used) >[2011/12/15 11:45:31.281960, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.282026, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.282111, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.282173, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.282242, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.282358, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.282478, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.282735, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.282799, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.282860, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.282929, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.282993, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.283054, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.285186, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.285249, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.285310, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.285371, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.285434, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.285476, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2177 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.285792, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.288517, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.288639, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.288721, 3] smbd/process.c:1661(process_smb) > Transaction 35 of length 112 (0 toread) >[2011/12/15 11:45:31.288798, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.288846, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2241 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.290092, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.290301, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.290382, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.290468, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.290589, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.290674, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.290762, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.290855, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.290938, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.291021, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.291118, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.291217, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.291302, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.291385, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.291488, 5] smbd/files.c:126(file_new) > allocated file structure 13409, fnum = 17505 (2 used) >[2011/12/15 11:45:31.291582, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.291669, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.291749, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.291839, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.291936, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.292019, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.292099, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.292549, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.292646, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.292741, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.292856, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.292967, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.293061, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.293163, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.293304, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.293411, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.293531, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.293655, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.293764, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.293867, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.293965, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.294070, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.294192, 5] smbd/files.c:464(file_free) > freed files structure 17505 (1 used) >[2011/12/15 11:45:31.294289, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.294388, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.294532, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.294627, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.294733, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.294925, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.295098, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.295458, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.295552, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.295639, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.295735, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.295833, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.295921, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.299046, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.299150, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.299237, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.299330, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.299455, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.299516, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2241 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.299981, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.302125, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.302244, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.302330, 3] smbd/process.c:1661(process_smb) > Transaction 36 of length 112 (0 toread) >[2011/12/15 11:45:31.302410, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.302458, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2305 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.303741, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.303963, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.304056, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.304158, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.304258, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.304357, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.304462, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.304567, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.304658, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.304745, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.304843, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.304941, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.305030, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.305119, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.305225, 5] smbd/files.c:126(file_new) > allocated file structure 13410, fnum = 17506 (2 used) >[2011/12/15 11:45:31.305326, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.305470, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.305564, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.305660, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.305760, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.305846, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.305932, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.306017, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.306107, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.306195, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.306304, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.306413, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.306500, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.306594, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.306724, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.306824, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.306916, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.307005, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.307100, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.307190, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.307281, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.307374, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.307485, 5] smbd/files.c:464(file_free) > freed files structure 17506 (1 used) >[2011/12/15 11:45:31.307578, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.307676, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.307813, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.307905, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.308008, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.308195, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.308370, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.308757, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.308851, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.308939, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.309036, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.309122, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.309758, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.313017, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.313127, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.313216, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.313307, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.313400, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.313469, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2305 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.313915, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.316327, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.316459, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.316550, 3] smbd/process.c:1661(process_smb) > Transaction 37 of length 112 (0 toread) >[2011/12/15 11:45:31.316635, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.316690, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2369 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.317935, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.318149, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.318239, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.318366, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.318462, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.318554, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.318648, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.318749, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.318835, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.318923, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.319024, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.319120, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.319208, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.319290, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.319387, 5] smbd/files.c:126(file_new) > allocated file structure 13411, fnum = 17507 (2 used) >[2011/12/15 11:45:31.319475, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.319562, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.319646, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.319728, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.319825, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.319910, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.319995, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.320081, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.320164, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.320252, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.320360, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.320460, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.320544, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.320635, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.320762, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.320856, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.320945, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.321064, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.321154, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.321236, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.321318, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.321403, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.325923, 5] smbd/files.c:464(file_free) > freed files structure 17507 (1 used) >[2011/12/15 11:45:31.326030, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.326117, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.326237, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.326313, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.326400, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.326591, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.326738, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.327043, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.327124, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.327197, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.327286, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.327364, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.327436, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.330158, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.330258, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.330330, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.330407, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.330538, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.330582, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2369 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.330959, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.334026, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.334181, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.334256, 3] smbd/process.c:1661(process_smb) > Transaction 38 of length 112 (0 toread) >[2011/12/15 11:45:31.334328, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.334371, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2433 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.335458, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.335659, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.335738, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.335822, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.335904, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.335985, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.336069, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.336159, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.336233, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.336311, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.336408, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.336502, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.336588, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.336676, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.336773, 5] smbd/files.c:126(file_new) > allocated file structure 13412, fnum = 17508 (2 used) >[2011/12/15 11:45:31.336902, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.336986, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.337075, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.337160, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.337244, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.337316, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.337389, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.337464, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.337540, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.337616, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.337710, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.337803, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.337876, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.337955, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.338065, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.338147, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.338223, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.338297, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.338386, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.338487, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.338564, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.338644, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.338744, 5] smbd/files.c:464(file_free) > freed files structure 17508 (1 used) >[2011/12/15 11:45:31.338820, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.338902, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.339020, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.339096, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.339182, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.339345, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.339487, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.339825, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.339908, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.339981, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.340069, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.340148, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.340220, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.342914, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.343012, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.343086, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.343164, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.343241, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.343285, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2433 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.343663, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.346086, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.346243, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.346318, 3] smbd/process.c:1661(process_smb) > Transaction 39 of length 112 (0 toread) >[2011/12/15 11:45:31.346392, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.346435, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2497 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.347516, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.347721, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.347829, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.347914, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.347999, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.348081, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.348164, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.348255, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.348329, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.348404, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.348491, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.348576, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.348650, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.348724, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.348813, 5] smbd/files.c:126(file_new) > allocated file structure 13413, fnum = 17509 (2 used) >[2011/12/15 11:45:31.348896, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.348975, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.349049, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.349131, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.349220, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.349293, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.349368, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.349442, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.349520, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.349596, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.349691, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.349784, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.349858, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.349937, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.350048, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.350130, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.350238, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.350314, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.350403, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.350520, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.350597, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.350678, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.350780, 5] smbd/files.c:464(file_free) > freed files structure 17509 (1 used) >[2011/12/15 11:45:31.350857, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.350941, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.351060, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.351146, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.351220, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.351363, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.351478, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.351719, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.351783, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.351844, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.351916, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.351981, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.352042, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.354193, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.354256, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.354317, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.354398, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.354473, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.354510, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2497 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.354826, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.357481, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.357556, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.357618, 3] smbd/process.c:1661(process_smb) > Transaction 40 of length 112 (0 toread) >[2011/12/15 11:45:31.357679, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.357715, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2561 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.358617, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.358748, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.358811, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.358879, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.358947, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.359013, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.359080, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.359153, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.359215, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.359276, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.359345, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.359414, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.359474, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.359535, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.359624, 5] smbd/files.c:126(file_new) > allocated file structure 13414, fnum = 17510 (2 used) >[2011/12/15 11:45:31.359694, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.359758, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.359820, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.359886, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.359955, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.360016, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.360077, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.360138, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.360200, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.360263, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.360336, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.360408, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.360470, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.360535, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.360618, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.360685, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.360748, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.360811, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.360879, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.360944, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.361008, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.361073, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.361147, 5] smbd/files.c:464(file_free) > freed files structure 17510 (1 used) >[2011/12/15 11:45:31.361210, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.361276, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.361361, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.361423, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.361498, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.361615, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.361741, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.361981, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.362045, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.362106, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.362175, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.362239, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.362300, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.364441, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.364504, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.364565, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.364626, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.364689, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.364726, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2561 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.365042, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.368217, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.368291, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.368353, 3] smbd/process.c:1661(process_smb) > Transaction 41 of length 112 (0 toread) >[2011/12/15 11:45:31.368413, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.368449, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2625 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.369336, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.369488, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.369553, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.369617, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.369684, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.369748, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.369815, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.369885, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.369946, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.370008, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.370075, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.370144, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.370205, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.370265, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.370335, 5] smbd/files.c:126(file_new) > allocated file structure 13415, fnum = 17511 (2 used) >[2011/12/15 11:45:31.370403, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.370474, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.370537, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.370602, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.370671, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.370732, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.370793, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.370854, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.370915, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.370977, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.371049, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.371117, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.371178, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.371242, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.371324, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.371413, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.371476, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.371538, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.371606, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.371669, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.371732, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.371797, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.371872, 5] smbd/files.c:464(file_free) > freed files structure 17511 (1 used) >[2011/12/15 11:45:31.371934, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.372000, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.372085, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.372147, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.372215, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.372331, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.372441, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.372678, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.372742, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.372803, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.372871, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.372936, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.372996, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.375158, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.375222, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.375300, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.375363, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.375426, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.375462, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2625 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.375778, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.378831, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.378905, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.378966, 3] smbd/process.c:1661(process_smb) > Transaction 42 of length 112 (0 toread) >[2011/12/15 11:45:31.379027, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.379063, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2689 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.379949, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.380078, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.380141, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.380205, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.380272, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.380336, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.380402, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.380472, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.380533, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.380595, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.380662, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.380731, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.380792, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.380853, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.380941, 5] smbd/files.c:126(file_new) > allocated file structure 13416, fnum = 17512 (2 used) >[2011/12/15 11:45:31.381009, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.381073, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.381134, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.381200, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.381269, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.381330, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.381391, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.381454, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.381519, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.381581, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.381653, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.381721, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.381783, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.381847, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.381929, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.381996, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.382058, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.382121, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.382189, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.382253, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.382316, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.382381, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.382465, 5] smbd/files.c:464(file_free) > freed files structure 17512 (1 used) >[2011/12/15 11:45:31.382529, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.382595, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.382680, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.382742, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.382811, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.382926, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.383055, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.383295, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.383358, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.383419, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.383488, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.383553, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.383613, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.385748, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.385812, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.385872, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.385934, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.385997, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.386033, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2689 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.386350, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.388341, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.388414, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.388475, 3] smbd/process.c:1661(process_smb) > Transaction 43 of length 112 (0 toread) >[2011/12/15 11:45:31.388536, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.388572, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2753 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.389463, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.389610, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.389673, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.389737, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.389804, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.389868, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.389934, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.390004, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.390065, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.390127, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.390194, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.390263, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.390324, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.390385, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.390464, 5] smbd/files.c:126(file_new) > allocated file structure 13417, fnum = 17513 (2 used) >[2011/12/15 11:45:31.390532, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.390596, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.390658, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.390723, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.390792, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.390853, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.390914, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.390975, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.391037, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.391099, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.391171, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.391239, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.391300, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.391363, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.391462, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.391529, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.391592, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.391654, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.391721, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.391785, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.391848, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.391913, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.391987, 5] smbd/files.c:464(file_free) > freed files structure 17513 (1 used) >[2011/12/15 11:45:31.392050, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.392116, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.392200, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.392262, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.392331, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.392446, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.392556, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.392794, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.392858, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.392919, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.392987, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.393052, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.393113, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.395256, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.395320, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.395392, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.395454, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.395517, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.395554, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2753 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.395869, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.397858, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.397932, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.397993, 3] smbd/process.c:1661(process_smb) > Transaction 44 of length 112 (0 toread) >[2011/12/15 11:45:31.398054, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.398090, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2817 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.398994, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.399124, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.399186, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.399250, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.399316, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.399380, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.399447, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.399517, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.399578, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.399639, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.399707, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.399775, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.399836, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.399897, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.399985, 5] smbd/files.c:126(file_new) > allocated file structure 13418, fnum = 17514 (2 used) >[2011/12/15 11:45:31.400053, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.400116, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.400178, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.400244, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.400313, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.400373, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.400434, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.400495, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.400557, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.400619, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.400691, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.400759, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.400820, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.400883, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.400966, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.401032, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.401094, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.401157, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.401224, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.401288, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.401351, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.401415, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.401495, 5] smbd/files.c:464(file_free) > freed files structure 17514 (1 used) >[2011/12/15 11:45:31.401558, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.401624, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.401709, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.401771, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.401840, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.401974, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.402085, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.402323, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.402386, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.402456, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.402525, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.402590, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.402651, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.404780, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.404843, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.404903, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.404964, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.405028, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.405064, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2817 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.405380, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.408188, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.408262, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.408324, 3] smbd/process.c:1661(process_smb) > Transaction 45 of length 112 (0 toread) >[2011/12/15 11:45:31.408385, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.408421, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2881 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.409306, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.409459, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.409523, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.409587, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.409654, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.409718, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.409784, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.409854, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.409915, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.409977, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.410044, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.410113, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.410174, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.410235, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.410304, 5] smbd/files.c:126(file_new) > allocated file structure 13419, fnum = 17515 (2 used) >[2011/12/15 11:45:31.410372, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.410436, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.410507, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.410572, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.410642, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.410702, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.410763, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.410824, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.410886, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.410948, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.411020, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.411088, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.411149, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.411227, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.411312, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.411378, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.411441, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.411503, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.411571, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.411636, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.411699, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.411763, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.411837, 5] smbd/files.c:464(file_free) > freed files structure 17515 (1 used) >[2011/12/15 11:45:31.411900, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.411966, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.412050, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.412112, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.412181, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.412296, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.412406, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.412643, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.412707, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.412769, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.412837, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.412901, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.412962, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.415109, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.415190, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.415252, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.415314, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.415377, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.415413, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2881 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.415730, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.418738, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.418812, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.418874, 3] smbd/process.c:1661(process_smb) > Transaction 46 of length 112 (0 toread) >[2011/12/15 11:45:31.418935, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.418970, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2945 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.419858, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.419987, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.420050, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.420114, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.420181, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.420244, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.420311, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.420380, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.420442, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.420503, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.420570, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.420639, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.420700, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.420778, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.420850, 5] smbd/files.c:126(file_new) > allocated file structure 13420, fnum = 17516 (2 used) >[2011/12/15 11:45:31.420918, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.420981, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.421043, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.421109, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.421196, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.421273, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.421347, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.421419, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.421494, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.421569, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.421661, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.421750, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.421823, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.421901, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.422011, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.422091, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.422167, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.422242, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.422330, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.422409, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.422509, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.422590, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.422689, 5] smbd/files.c:464(file_free) > freed files structure 17516 (1 used) >[2011/12/15 11:45:31.422809, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.422892, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.423010, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.423086, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.423173, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.423367, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.423514, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.423836, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.423917, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.423989, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.424077, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.424156, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.424227, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.426896, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.426995, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.427067, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.427145, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.427222, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.427265, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2945 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.427639, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.430480, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.430635, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.430708, 3] smbd/process.c:1661(process_smb) > Transaction 47 of length 112 (0 toread) >[2011/12/15 11:45:31.430780, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.430823, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3009 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.431901, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.432100, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.432179, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.432260, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.432343, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.432423, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.432505, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.432594, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.432668, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.432742, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.432827, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.432911, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.432983, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.433056, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.433144, 5] smbd/files.c:126(file_new) > allocated file structure 13421, fnum = 17517 (2 used) >[2011/12/15 11:45:31.433226, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.433303, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.433377, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.433458, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.433547, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.433620, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.433693, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.433766, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.433840, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.433916, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.434009, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.434100, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.434173, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.434282, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.434393, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.434501, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.434578, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.434652, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.434741, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.434819, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.434895, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.434975, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.435076, 5] smbd/files.c:464(file_free) > freed files structure 17517 (1 used) >[2011/12/15 11:45:31.435155, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.435248, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.435379, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.435467, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.435566, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.435738, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.435897, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.436204, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.436283, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.436356, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.436443, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.436521, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.436593, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.439299, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.439397, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.439471, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.439548, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.439625, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.439668, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3009 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.440043, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.442559, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.442715, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.442788, 3] smbd/process.c:1661(process_smb) > Transaction 48 of length 112 (0 toread) >[2011/12/15 11:45:31.442861, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.442904, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3073 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.443951, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.444152, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.444230, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.444312, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.444395, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.444475, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.444559, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.444649, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.444723, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.444797, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.444883, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.444969, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.445074, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.445150, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.445239, 5] smbd/files.c:126(file_new) > allocated file structure 13422, fnum = 17518 (2 used) >[2011/12/15 11:45:31.445320, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.445399, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.445474, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.445556, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.445645, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.445718, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.445792, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.445865, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.445939, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.446016, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.446108, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.446200, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.446273, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.446352, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.446483, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.446566, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.446642, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.446717, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.446805, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.446883, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.446959, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.447039, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.447138, 5] smbd/files.c:464(file_free) > freed files structure 17518 (1 used) >[2011/12/15 11:45:31.447215, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.447297, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.447414, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.447489, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.447605, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.447767, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.447910, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.448215, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.448296, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.448369, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.448457, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.448536, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.448608, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.451002, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.451082, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.451144, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.451208, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.451273, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.451309, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3073 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.451626, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.454520, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.454595, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.454657, 3] smbd/process.c:1661(process_smb) > Transaction 49 of length 112 (0 toread) >[2011/12/15 11:45:31.454718, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.454754, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3137 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.455658, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.455790, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.455853, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.455921, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.455990, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.456057, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.456126, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.456202, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.456263, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.456325, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.456394, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.456463, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.456523, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.456584, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.456655, 5] smbd/files.c:126(file_new) > allocated file structure 13423, fnum = 17519 (2 used) >[2011/12/15 11:45:31.456725, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.456789, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.456851, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.456917, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.456986, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.457046, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.457108, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.457169, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.457231, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.457294, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.457367, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.457441, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.457528, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.457594, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.457677, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.457745, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.457808, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.457871, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.457942, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.458006, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.458070, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.458136, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.458211, 5] smbd/files.c:464(file_free) > freed files structure 17519 (1 used) >[2011/12/15 11:45:31.458274, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.458340, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.458433, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.458505, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.458575, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.458699, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.458812, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.459051, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.459115, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.459176, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.459247, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.459311, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.459372, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.461527, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.461591, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.461651, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.461713, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.461776, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.461812, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3137 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.462128, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.462178, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:31.462241, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:31.462301, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:31.462404, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:45:31.464042, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.464113, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.464174, 3] smbd/process.c:1661(process_smb) > Transaction 50 of length 112 (0 toread) >[2011/12/15 11:45:31.464235, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.464271, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3201 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.465160, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.465290, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.465354, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:45:31.465420, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:45:31.465505, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:31.465584, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:31.465652, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:31.465717, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:31.465972, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:45:31.466094, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:45:31.466163, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.466230, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.466294, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.466361, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.466432, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.466504, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.466565, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.466633, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.466702, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.466763, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.466823, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.466893, 5] smbd/files.c:126(file_new) > allocated file structure 13424, fnum = 17520 (2 used) >[2011/12/15 11:45:31.466961, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.467024, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.467086, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.467151, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.467221, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.467282, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.467342, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.467404, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.467465, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.467528, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.467600, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.467667, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126f58 >[2011/12/15 11:45:31.467729, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.467792, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.467891, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.467958, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x221270c8 >[2011/12/15 11:45:31.468021, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.468083, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.468152, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.468216, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.468279, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.468344, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.468418, 5] smbd/files.c:464(file_free) > freed files structure 17520 (1 used) >[2011/12/15 11:45:31.468481, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.468547, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.468632, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.468694, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.468762, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.468879, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.468989, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.469226, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.469290, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.469351, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.469420, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.469490, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.469551, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.471690, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.471769, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.471831, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.471892, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.471956, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.471992, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3201 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.472309, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.474646, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.474720, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.474782, 3] smbd/process.c:1661(process_smb) > Transaction 51 of length 112 (0 toread) >[2011/12/15 11:45:31.474843, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.474879, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3265 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.475763, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.475893, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.475956, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.476020, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.476087, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.476151, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.476217, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.476288, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.476349, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.476410, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.476478, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.476546, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.476607, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.476668, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.476757, 5] smbd/files.c:126(file_new) > allocated file structure 13425, fnum = 17521 (2 used) >[2011/12/15 11:45:31.476825, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.476888, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.476950, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.477016, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.477084, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.477145, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.477206, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.477266, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.477328, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.477390, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.477466, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.477536, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.477597, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.477661, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.477744, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.477811, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.477873, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.477936, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.478004, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.478068, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.478131, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.478196, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.478271, 5] smbd/files.c:464(file_free) > freed files structure 17521 (1 used) >[2011/12/15 11:45:31.478334, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.478400, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.478493, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.478555, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.478623, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.478757, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.478869, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.479148, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.479212, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.479273, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.479342, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.479407, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.479468, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.481604, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.481668, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.481728, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.481790, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.481853, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.481889, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3265 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.482206, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.485190, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.485262, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.485324, 3] smbd/process.c:1661(process_smb) > Transaction 52 of length 112 (0 toread) >[2011/12/15 11:45:31.485385, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.485421, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3329 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.486329, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.486469, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.486533, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.486597, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.486664, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.486729, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.486795, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.486866, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.486927, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.486988, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.487056, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.487125, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.487186, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.487246, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.487316, 5] smbd/files.c:126(file_new) > allocated file structure 13426, fnum = 17522 (2 used) >[2011/12/15 11:45:31.487384, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.487448, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.487509, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.487575, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.487644, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.487705, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.487766, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.487827, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.487888, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.487950, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.488023, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.488091, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.488152, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.488232, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.488316, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.488382, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.488445, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.488508, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.488576, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.488641, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.488704, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.488768, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.488843, 5] smbd/files.c:464(file_free) > freed files structure 17522 (1 used) >[2011/12/15 11:45:31.488906, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.488971, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.489056, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.489118, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.489186, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.489302, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.489413, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.489656, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.489719, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.489781, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.489849, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.489914, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.489974, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.492112, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.492193, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.492254, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.492315, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.492379, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.492415, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3329 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.492731, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.494686, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.494760, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.494822, 3] smbd/process.c:1661(process_smb) > Transaction 53 of length 112 (0 toread) >[2011/12/15 11:45:31.494883, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.494919, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3393 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.495805, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.495935, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.495997, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.496061, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.496128, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.496192, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.496259, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.496329, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.496390, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.496451, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.496519, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.496588, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.496648, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.496727, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.496798, 5] smbd/files.c:126(file_new) > allocated file structure 13427, fnum = 17523 (2 used) >[2011/12/15 11:45:31.496866, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.496930, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.496991, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.497057, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.497126, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.497187, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.497248, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.497308, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.497370, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.497432, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.497510, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.497578, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.497639, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.497703, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.497785, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.497852, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.497914, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.497977, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.498045, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.498109, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.498172, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.498237, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.498311, 5] smbd/files.c:464(file_free) > freed files structure 17523 (1 used) >[2011/12/15 11:45:31.498374, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.498440, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.498535, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.498596, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.498664, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.498797, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.498908, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.499144, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.499208, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.499269, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.499337, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.499402, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.499463, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.501598, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.501661, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.501722, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.501783, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.501847, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.501883, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3393 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.502199, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.504169, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.504241, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.504303, 3] smbd/process.c:1661(process_smb) > Transaction 54 of length 112 (0 toread) >[2011/12/15 11:45:31.504364, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.504400, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3457 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.505303, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.505433, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.505501, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.505565, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.505633, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.505697, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.505764, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.505833, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.505895, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.505956, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.506023, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.506092, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.506153, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.506213, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.506283, 5] smbd/files.c:126(file_new) > allocated file structure 13428, fnum = 17524 (2 used) >[2011/12/15 11:45:31.506350, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.506414, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.506486, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.506552, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.506620, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.506681, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.506741, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.506802, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.506864, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.506926, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.506997, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.507065, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.507126, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.507209, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.507292, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.507358, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.507420, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.507483, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.507551, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.507615, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.507678, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.507743, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.507817, 5] smbd/files.c:464(file_free) > freed files structure 17524 (1 used) >[2011/12/15 11:45:31.507880, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.507946, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.508031, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.508092, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.508160, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.508276, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.508386, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.508622, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.508686, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.508747, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.508816, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.508880, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.508941, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.511100, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.511165, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.511225, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.511287, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.511350, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.511387, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3457 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.511704, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.514750, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.514827, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.514888, 3] smbd/process.c:1661(process_smb) > Transaction 55 of length 112 (0 toread) >[2011/12/15 11:45:31.514949, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.514985, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3521 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.515882, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.516013, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.516075, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.516140, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.516207, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.516272, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.516338, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.516409, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.516470, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.516531, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.516599, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.516668, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.516747, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.516809, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.516879, 5] smbd/files.c:126(file_new) > allocated file structure 13429, fnum = 17525 (2 used) >[2011/12/15 11:45:31.516948, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.517011, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.517073, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.517139, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.517209, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.517270, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.517330, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.517391, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.517457, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.517522, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.517594, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.517663, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.517724, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.517788, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.517871, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.517937, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.518000, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.518062, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.518131, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.518196, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.518259, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.518324, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.518398, 5] smbd/files.c:464(file_free) > freed files structure 17525 (1 used) >[2011/12/15 11:45:31.518470, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.518537, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.518622, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.518683, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.518767, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.518910, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.519022, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.519259, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.519322, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.519384, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.519452, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.519517, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.519578, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.521928, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.522028, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.522101, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.522179, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.522256, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.522299, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3521 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.522700, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.525536, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.525691, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.525765, 3] smbd/process.c:1661(process_smb) > Transaction 56 of length 112 (0 toread) >[2011/12/15 11:45:31.525838, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.525881, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3585 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.526986, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.527188, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.527266, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.527349, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.527433, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.527512, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.527596, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.527686, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.527760, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.527833, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.527919, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.528003, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.528075, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.528148, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.528237, 5] smbd/files.c:126(file_new) > allocated file structure 13430, fnum = 17526 (2 used) >[2011/12/15 11:45:31.528319, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.528397, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.528470, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.528552, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.528640, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.528713, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.528786, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.528859, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.528934, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.529010, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.529103, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.529195, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.529299, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.529377, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.529490, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.529573, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.529648, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.529723, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.529812, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.529890, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.529965, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.530047, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.530148, 5] smbd/files.c:464(file_free) > freed files structure 17526 (1 used) >[2011/12/15 11:45:31.530224, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.530306, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.530425, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.530523, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.530610, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.530772, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.530916, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.531218, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.531299, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.531371, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.531458, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.531538, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.531610, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.534295, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.534392, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.534487, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.534565, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.534641, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.534685, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3585 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.535084, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.537561, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.537719, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.537793, 3] smbd/process.c:1661(process_smb) > Transaction 57 of length 112 (0 toread) >[2011/12/15 11:45:31.537865, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.537908, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3649 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.538982, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.539185, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.539263, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.539345, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.539428, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.539512, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.539596, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.539686, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.539759, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.539834, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.539919, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.540003, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.540109, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.540181, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.540270, 5] smbd/files.c:126(file_new) > allocated file structure 13431, fnum = 17527 (2 used) >[2011/12/15 11:45:31.540352, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.540430, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.540504, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.540585, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.540673, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.540746, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.540819, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.540892, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.540967, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.541042, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.541136, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.541228, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.541301, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.541379, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.541490, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.541571, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.541648, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.541723, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.541811, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.541889, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.541965, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.542046, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.542147, 5] smbd/files.c:464(file_free) > freed files structure 17527 (1 used) >[2011/12/15 11:45:31.542224, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.542306, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.542423, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.542547, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.542663, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.542827, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.542971, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.543273, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.543355, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.543428, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.543515, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.543594, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.543666, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.546317, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.546415, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.546510, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.546587, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.546664, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.546708, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3649 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.547083, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.549532, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.549664, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.549726, 3] smbd/process.c:1661(process_smb) > Transaction 58 of length 112 (0 toread) >[2011/12/15 11:45:31.549787, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.549824, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3713 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.550747, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.550880, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.550944, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.551013, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.551082, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.551149, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.551219, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.551293, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.551354, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.551416, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.551486, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.551554, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.551615, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.551676, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.551747, 5] smbd/files.c:126(file_new) > allocated file structure 13432, fnum = 17528 (2 used) >[2011/12/15 11:45:31.551816, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.551881, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.551943, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.552009, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.552078, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.552139, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.552199, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.552261, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.552323, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.552385, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.552459, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.552551, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.552613, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.552678, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.552761, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.552828, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.552892, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.552954, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.553025, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.553090, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.553154, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.553220, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.553295, 5] smbd/files.c:464(file_free) > freed files structure 17528 (1 used) >[2011/12/15 11:45:31.553358, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.553424, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.553521, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.553584, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.553653, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.553778, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.553891, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.554129, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.554193, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.554254, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.554325, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.554390, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.554461, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.556613, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.556676, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.556737, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.556799, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.556863, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.556899, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3713 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.557216, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.560084, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.560161, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.560223, 3] smbd/process.c:1661(process_smb) > Transaction 59 of length 112 (0 toread) >[2011/12/15 11:45:31.560284, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.560320, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3777 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.561205, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.561334, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.561397, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.561465, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.561533, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.561598, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.561665, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.561736, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.561797, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.561858, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.561927, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.562013, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.562074, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.562135, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.562205, 5] smbd/files.c:126(file_new) > allocated file structure 13433, fnum = 17529 (2 used) >[2011/12/15 11:45:31.562273, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.562337, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.562398, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.562475, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.562544, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.562605, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.562666, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.562727, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.562789, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.562851, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.562924, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.562992, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.563053, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.563117, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.563200, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.563267, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.563330, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.563392, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.563460, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.563525, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.563589, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.563653, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.563728, 5] smbd/files.c:464(file_free) > freed files structure 17529 (1 used) >[2011/12/15 11:45:31.563791, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.563857, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.563943, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.564024, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.564094, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.564211, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.564322, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.564559, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.564623, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.564684, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.564753, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.564817, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.564878, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.567021, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.567085, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.567145, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.567207, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.567270, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.567307, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3777 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.567623, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.569597, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:31.569671, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:31.569732, 3] smbd/process.c:1661(process_smb) > Transaction 60 of length 112 (0 toread) >[2011/12/15 11:45:31.569793, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.569829, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3841 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:45:31.570742, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:45:31.570872, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.570935, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.570999, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:45:31.571066, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:45:31.571142, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:45:31.571236, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.571340, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.571431, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.571521, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.571620, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.571720, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.571802, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.571885, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:45:31.571986, 5] smbd/files.c:126(file_new) > allocated file structure 13434, fnum = 17530 (2 used) >[2011/12/15 11:45:31.572089, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:45:31.572175, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:45:31.572239, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.572305, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:45:31.572375, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:45:31.572436, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:45:31.572497, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:45:31.572558, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.572619, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.572682, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.572773, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.572844, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bb8 >[2011/12/15 11:45:31.572905, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:45:31.572970, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.573052, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:45:31.573119, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d28 >[2011/12/15 11:45:31.573182, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:45:31.573244, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.573313, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.573378, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:45:31.573441, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:45:31.573513, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:45:31.573588, 5] smbd/files.c:464(file_free) > freed files structure 17530 (1 used) >[2011/12/15 11:45:31.573651, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.573716, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:45:31.573803, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.573865, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.573934, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.574052, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.574163, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:45:31.574399, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.574472, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.574544, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:45:31.574614, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:45:31.574679, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:45:31.574740, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:31.576890, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.576954, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.577014, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.577076, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:31.577140, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.577176, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3841 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.577497, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.580470, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 106 >[2011/12/15 11:45:31.580543, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6a >[2011/12/15 11:45:31.580605, 3] smbd/process.c:1661(process_smb) > Transaction 61 of length 110 (0 toread) >[2011/12/15 11:45:31.580665, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.580701, 5] lib/util.c:342(show_msg) > size=106 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3905 > smt_wct=15 > smb_vwv[ 0]= 38 (0x26) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 38 (0x26) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=41 >[2011/12/15 11:45:31.581374, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F 00 6C .t.e.s.t ._.f.o.l > [0020] 00 64 00 65 00 72 00 00 00 .d.e.r.. . >[2011/12/15 11:45:31.581556, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.581619, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.581687, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:45:31.581758, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder" >[2011/12/15 11:45:31.581823, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [TEST_FOLDER] >[2011/12/15 11:45:31.581885, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = test_folder, dirpath = , start = test_folder >[2011/12/15 11:45:31.581954, 5] smbd/statcache.c:143(stat_cache_add) > stat_cache_add: Added entry (221268d8:size b) TEST_FOLDER -> test_folder >[2011/12/15 11:45:31.582017, 5] smbd/filename.c:439(unix_convert) > conversion of base_name finished test_folder -> test_folder >[2011/12/15 11:45:31.582078, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.582149, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.582210, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.582272, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_folder >[2011/12/15 11:45:31.582353, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:45:31.582414, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:31.582488, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:31.582551, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:31.582621, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:45:31.582683, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_folder, attr = 22 >[2011/12/15 11:45:31.582745, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:45:31.582821, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x2210acb0 now at offset -1 >[2011/12/15 11:45:31.582889, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_folder >[2011/12/15 11:45:31.582951, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.583012, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.583084, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:31.583145, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_folder] found ./test_folder fname=test_folder (test_folder) >[2011/12/15 11:45:31.583213, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:45:31.583275, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:31.583340, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: test_folder -> 2B55F808 -> TC0VAQ~0 (cache=1) >[2011/12/15 11:45:31.583407, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:45:31.583468, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:45:31.583535, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 16582 >[2011/12/15 11:45:31.583598, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116 >[2011/12/15 11:45:31.583659, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.583695, 5] lib/util.c:342(show_msg) > size=184 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3905 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 116 (0x74) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 116 (0x74) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=129 >[2011/12/15 11:45:31.584248, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 74 00 00 ........ .....t.. > [0010] 00 00 00 00 00 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [0020] 93 F6 BA CC 01 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [0030] 93 F6 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0040] 00 00 00 00 00 10 00 00 00 16 00 00 00 00 00 00 ........ ........ > [0050] 00 10 00 54 00 43 00 30 00 56 00 41 00 51 00 7E ...T.C.0 .V.A.Q.~ > [0060] 00 30 00 00 00 00 00 00 00 00 00 74 00 65 00 73 .0...... ...t.e.s > [0070] 00 74 00 5F 00 66 00 6F 00 6C 00 64 00 65 00 72 .t._.f.o .l.d.e.r > [0080] 00 . >[2011/12/15 11:45:31.584715, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_folder directory=. dirtype=22 numentries=1 >[2011/12/15 11:45:31.584781, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: test_folder -> 2B55F808 -> TC0VAQ~0 (cache=1) >[2011/12/15 11:45:31.586980, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 110 >[2011/12/15 11:45:31.587070, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6e >[2011/12/15 11:45:31.587132, 3] smbd/process.c:1661(process_smb) > Transaction 62 of length 114 (0 toread) >[2011/12/15 11:45:31.587192, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.587228, 5] lib/util.c:342(show_msg) > size=110 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3969 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6144 (0x1800) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=27 >[2011/12/15 11:45:31.588174, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 00 00 .l.d.e.r ... >[2011/12/15 11:45:31.588364, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.588442, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.588522, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder >[2011/12/15 11:45:31.588606, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder" >[2011/12/15 11:45:31.588689, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.588782, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.588875, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.588954, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.589091, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder >[2011/12/15 11:45:31.589163, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.589233, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.589294, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.589355, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_folder >[2011/12/15 11:45:31.589426, 5] smbd/files.c:126(file_new) > allocated file structure 13435, fnum = 17531 (2 used) >[2011/12/15 11:45:31.589499, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_folder hash 0x39173e53 >[2011/12/15 11:45:31.589564, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(test_folder) returning 0744 >[2011/12/15 11:45:31.589626, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=test_folder, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:31.589712, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.589782, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.589844, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.589905, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:45:31.589966, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.590028, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.590090, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=test_folder, after mapping access_mask=0x20089 >[2011/12/15 11:45:31.590163, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 0007000000000000518E >[2011/12/15 11:45:31.590237, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bc8 >[2011/12/15 11:45:31.590299, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:8e51:0 >[2011/12/15 11:45:31.590363, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 0007000000000000518E >[2011/12/15 11:45:31.590456, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 0007000000000000518E >[2011/12/15 11:45:31.590524, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d38 >[2011/12/15 11:45:31.590586, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file test_folder >[2011/12/15 11:45:31.590649, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:31.590717, 10] smbd/open.c:179(fd_open) > fd_open: name test_folder, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:31.590782, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file test_folder = 0 >[2011/12/15 11:45:31.590845, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file test_folder >[2011/12/15 11:45:31.590910, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 0007000000000000518E >[2011/12/15 11:45:31.590985, 5] smbd/files.c:464(file_free) > freed files structure 17531 (1 used) >[2011/12/15 11:45:31.591048, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory test_folder, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:45:31.591114, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file test_folder >[2011/12/15 11:45:31.591204, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:31.591266, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:45:31.591335, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:45:31.591456, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:31.591568, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:45:31.591821, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:31.591887, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:45:31.591948, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:45:31.592017, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file test_folder requesting 0x20089 returning 0x20009 (NT_STATUS_OK) >[2011/12/15 11:45:31.592085, 5] smbd/files.c:126(file_new) > allocated file structure 13436, fnum = 17532 (2 used) >[2011/12/15 11:45:31.592153, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_folder hash 0x39173e53 >[2011/12/15 11:45:31.592219, 10] smbd/open.c:179(fd_open) > fd_open: name test_folder, flags = 0600000 mode = 00, fd = 33. >[2011/12/15 11:45:31.592294, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 0007000000000000518E >[2011/12/15 11:45:31.592361, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22127bb8 >[2011/12/15 11:45:31.592426, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 1 >[2011/12/15 11:45:31.592529, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0xf81, type= 0x0, gen_id = 56, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:45:31.592606, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 0007000000000000518E >[2011/12/15 11:45:31.592681, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:45:31.592742, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:45:31.592804, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:45:31.592866, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.592927, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.592995, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:31.593095, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0xf81, type= 0x0, gen_id = 56, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:45:31.593166, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 17532, open name = test_folder >[2011/12/15 11:45:31.596469, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 70 >[2011/12/15 11:45:31.596543, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x46 >[2011/12/15 11:45:31.596605, 3] smbd/process.c:1661(process_smb) > Transaction 63 of length 74 (0 toread) >[2011/12/15 11:45:31.596666, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.596701, 5] lib/util.c:342(show_msg) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4033 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2011/12/15 11:45:31.597372, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 02 01 ..... >[2011/12/15 11:45:31.597453, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.597536, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.597601, 3] smbd/trans2.c:3512(call_trans2qfsinfo) > call_trans2qfsinfo: level = 258 >[2011/12/15 11:45:31.597674, 3] smbd/trans2.c:2950(smbd_do_qfsinfo) > smbd_do_qfsinfo: level = 258 >[2011/12/15 11:45:31.597749, 5] smbd/trans2.c:3092(smbd_do_qfsinfo) > smbd_do_qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 6, vol=public serv=public >[2011/12/15 11:45:31.597816, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 30, useable_space = 16584 >[2011/12/15 11:45:31.597878, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 0, data_to_send = 30, paramsize = 0, datasize = 30 >[2011/12/15 11:45:31.597939, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.597975, 5] lib/util.c:342(show_msg) > size=86 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4033 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 30 (0x1E) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 30 (0x1E) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=31 >[2011/12/15 11:45:31.598538, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 00 91 2E EA 88 0C 00 00 ........ ........ > [0010] 00 00 00 70 00 75 00 62 00 6C 00 69 00 63 00 ...p.u.b .l.i.c. >[2011/12/15 11:45:31.598677, 4] smbd/trans2.c:3528(call_trans2qfsinfo) > SMBtrans2 info_level = 258 >[2011/12/15 11:45:31.600433, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:45:31.600502, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:45:31.600564, 3] smbd/process.c:1661(process_smb) > Transaction 64 of length 76 (0 toread) >[2011/12/15 11:45:31.600624, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.600660, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4097 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 104 (0x68) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:45:31.601330, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 7C 44 EC 03 ...|D.. >[2011/12/15 11:45:31.601409, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.601477, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.601539, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 >[2011/12/15 11:45:31.601617, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:31.601717, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0xf81, type= 0x0, gen_id = 56, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:45:31.601781, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:45:31.601843, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_folder (fnum = 17532) level=1004 call=7 total_data=0 >[2011/12/15 11:45:31.601907, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_folder (fnum = 17532) level=1004 max_data=104 >[2011/12/15 11:45:31.601987, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:45:31.602050, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.602111, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.602178, 10] smbd/trans2.c:4457(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_BASIC_INFORMATION >[2011/12/15 11:45:31.602240, 5] smbd/trans2.c:4467(smbd_do_qfilepathinfo) > SMB_QFBI - create: Thu Dec 15 10:55:48 2011 > access: Thu Dec 15 10:55:48 2011 > write: Thu Dec 15 10:55:48 2011 > change: Thu Dec 15 10:55:48 2011 > mode: 10 >[2011/12/15 11:45:31.602455, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 16582 >[2011/12/15 11:45:31.602518, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 >[2011/12/15 11:45:31.602579, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.602615, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4097 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=45 >[2011/12/15 11:45:31.603170, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [0010] 93 F6 BA CC 01 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [0020] 93 F6 BA CC 01 10 00 00 00 00 00 00 00 ........ ..... >[2011/12/15 11:45:31.606824, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:45:31.606898, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:45:31.606959, 3] smbd/process.c:1661(process_smb) > Transaction 65 of length 76 (0 toread) >[2011/12/15 11:45:31.607020, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.607056, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4161 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 64 (0x40) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:45:31.607726, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 7C 44 ED 03 ...|D.. >[2011/12/15 11:45:31.607804, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.607867, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.607929, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 >[2011/12/15 11:45:31.608003, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:31.608102, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0xf81, type= 0x0, gen_id = 56, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:45:31.608165, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:45:31.608227, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_folder (fnum = 17532) level=1005 call=7 total_data=0 >[2011/12/15 11:45:31.608307, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_folder (fnum = 17532) level=1005 max_data=64 >[2011/12/15 11:45:31.608371, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:45:31.608432, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.608493, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.608559, 10] smbd/trans2.c:4478(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2011/12/15 11:45:31.608621, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 >[2011/12/15 11:45:31.608683, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2011/12/15 11:45:31.608744, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.608780, 5] lib/util.c:342(show_msg) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4161 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2011/12/15 11:45:31.609333, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0010] 00 00 00 00 00 01 00 00 00 00 01 00 00 ........ ..... >[2011/12/15 11:45:31.612017, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:45:31.612087, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:45:31.612148, 3] smbd/process.c:1661(process_smb) > Transaction 66 of length 76 (0 toread) >[2011/12/15 11:45:31.612209, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.612245, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4225 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:45:31.612914, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 7C 44 EE 03 ...|D.. >[2011/12/15 11:45:31.612993, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.613055, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.613117, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 >[2011/12/15 11:45:31.613190, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:31.613288, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0xf81, type= 0x0, gen_id = 56, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:45:31.613352, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:45:31.613413, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_folder (fnum = 17532) level=1006 call=7 total_data=0 >[2011/12/15 11:45:31.613476, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_folder (fnum = 17532) level=1006 max_data=40 >[2011/12/15 11:45:31.613555, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:45:31.613618, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.613679, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.613749, 10] smbd/trans2.c:4620(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION >[2011/12/15 11:45:31.613811, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 >[2011/12/15 11:45:31.613872, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 >[2011/12/15 11:45:31.613933, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.613970, 5] lib/util.c:342(show_msg) > size=68 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4225 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 8 (0x8) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 8 (0x8) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=13 >[2011/12/15 11:45:31.614536, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 51 8E 00 00 00 00 00 00 .....Q.. ..... >[2011/12/15 11:45:31.617151, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:45:31.617221, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:45:31.617282, 3] smbd/process.c:1661(process_smb) > Transaction 67 of length 76 (0 toread) >[2011/12/15 11:45:31.617342, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.617378, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4289 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 32 (0x20) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:45:31.618053, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 7C 44 EF 03 ...|D.. >[2011/12/15 11:45:31.618132, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.618195, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.618257, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1007 >[2011/12/15 11:45:31.618330, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:31.618428, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0xf81, type= 0x0, gen_id = 56, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:45:31.618513, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:45:31.618575, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_folder (fnum = 17532) level=1007 call=7 total_data=0 >[2011/12/15 11:45:31.618638, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_folder (fnum = 17532) level=1007 max_data=32 >[2011/12/15 11:45:31.618700, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:45:31.618761, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:45:31.618822, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:45:31.618906, 10] smbd/trans2.c:4493(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_EA_INFORMATION >[2011/12/15 11:45:31.618968, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 16582 >[2011/12/15 11:45:31.619029, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4 >[2011/12/15 11:45:31.619090, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.619126, 5] lib/util.c:342(show_msg) > size=64 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4289 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 4 (0x4) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4 (0x4) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=9 >[2011/12/15 11:45:31.619679, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 00 ........ . >[2011/12/15 11:45:31.622481, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 200 >[2011/12/15 11:45:31.622638, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xc8 >[2011/12/15 11:45:31.622713, 3] smbd/process.c:1661(process_smb) > Transaction 68 of length 204 (0 toread) >[2011/12/15 11:45:31.622785, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.622828, 5] lib/util.c:342(show_msg) > size=200 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4353 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=29184 (0x7200) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=117 >[2011/12/15 11:45:31.623867, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 7B 00 34 00 63 .l.d.e.r .:.{.4.c > [0020] 00 38 00 63 00 63 00 31 00 35 00 35 00 2D 00 36 .8.c.c.1 .5.5.-.6 > [0030] 00 63 00 31 00 65 00 2D 00 31 00 31 00 64 00 31 .c.1.e.- .1.1.d.1 > [0040] 00 2D 00 38 00 65 00 34 00 31 00 2D 00 30 00 30 .-.8.e.4 .1.-.0.0 > [0050] 00 63 00 30 00 34 00 66 00 62 00 39 00 33 00 38 .c.0.4.f .b.9.3.8 > [0060] 00 36 00 64 00 7D 00 3A 00 24 00 44 00 41 00 54 .6.d.}.: .$.D.A.T > [0070] 00 41 00 00 00 .A... >[2011/12/15 11:45:31.624456, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.624549, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.624634, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA >[2011/12/15 11:45:31.624718, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA" >[2011/12/15 11:45:31.624799, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.624886, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.624976, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.625081, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.625156, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA >[2011/12/15 11:45:31.625250, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.625327, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.625403, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.625446, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4353 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.625823, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.628905, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.629058, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.629131, 3] smbd/process.c:1661(process_smb) > Transaction 69 of length 182 (0 toread) >[2011/12/15 11:45:31.629203, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.629247, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4417 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.630295, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.630796, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.630887, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.630971, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.631055, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:31.631135, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.631223, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.631323, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.631449, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.631541, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.631652, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.631745, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.631839, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.631893, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4417 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.632333, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.635296, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.635452, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.635540, 3] smbd/process.c:1661(process_smb) > Transaction 70 of length 192 (0 toread) >[2011/12/15 11:45:31.635629, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.635678, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4481 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.636772, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.637857, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.637966, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.638060, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.638154, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:31.638333, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.638422, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.638529, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.638603, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.638712, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.638806, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.638883, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.638958, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.639001, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4481 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.639391, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.641580, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.641732, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.641806, 3] smbd/process.c:1661(process_smb) > Transaction 71 of length 166 (0 toread) >[2011/12/15 11:45:31.641878, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.641921, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4545 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.642984, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.643387, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.643471, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.643555, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.643638, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.643716, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.643802, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.643890, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.643961, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.644035, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.644157, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.644235, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.644311, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.644354, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4545 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.644725, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.646858, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.647011, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.647085, 3] smbd/process.c:1661(process_smb) > Transaction 72 of length 176 (0 toread) >[2011/12/15 11:45:31.647157, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.647199, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4609 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.648237, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.648697, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.648784, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.648868, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.648950, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.649030, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.649116, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.649205, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.649276, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.649350, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.649475, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.649555, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.649632, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.649675, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4609 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.650050, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.653238, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.653357, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.653420, 3] smbd/process.c:1661(process_smb) > Transaction 73 of length 166 (0 toread) >[2011/12/15 11:45:31.653481, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.653517, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4673 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.654400, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.654695, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.654759, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.654829, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.654898, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.654965, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.655038, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.655111, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.655172, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.655234, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.655309, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.655397, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.655461, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.655497, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4673 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.655812, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.658510, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.658582, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.658643, 3] smbd/process.c:1661(process_smb) > Transaction 74 of length 176 (0 toread) >[2011/12/15 11:45:31.658704, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.658740, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4737 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.659623, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.659940, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.660002, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.660067, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.660134, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.660198, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.660266, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.660335, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.660395, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.660457, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.660529, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.660591, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.660671, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.660708, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4737 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.661023, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.663834, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.663904, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.663966, 3] smbd/process.c:1661(process_smb) > Transaction 75 of length 166 (0 toread) >[2011/12/15 11:45:31.664026, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.664062, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4801 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.664946, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.665220, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.665282, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.665346, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.665413, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.665477, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.665545, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.665614, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.665674, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.665736, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.665807, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.665869, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.665933, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.665969, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4801 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.666302, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.669045, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.669115, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.669177, 3] smbd/process.c:1661(process_smb) > Transaction 76 of length 176 (0 toread) >[2011/12/15 11:45:31.669237, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.669273, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4865 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.670156, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.670486, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.670549, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.670614, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.670680, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.670744, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.670812, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.670881, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.670941, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.671003, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.671075, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.671138, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.671201, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.671237, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4865 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.671570, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.674364, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.674436, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.674505, 3] smbd/process.c:1661(process_smb) > Transaction 77 of length 166 (0 toread) >[2011/12/15 11:45:31.674566, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.674602, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4929 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.675503, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.675777, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.675840, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.675904, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.675970, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.676034, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.676103, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.676171, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.676231, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.676293, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.676365, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.676427, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.676490, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.676526, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4929 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.676842, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.680206, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.680298, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.680359, 3] smbd/process.c:1661(process_smb) > Transaction 78 of length 176 (0 toread) >[2011/12/15 11:45:31.680420, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.680456, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4993 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.681339, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.681655, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.681718, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.681783, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.681849, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.681913, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.681982, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.682050, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.682111, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.682172, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.682245, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.682307, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.682370, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.682406, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=4993 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.682733, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.685451, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.685525, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.685604, 3] smbd/process.c:1661(process_smb) > Transaction 79 of length 166 (0 toread) >[2011/12/15 11:45:31.685666, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.685702, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5057 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.686592, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.686866, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.686929, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.686993, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.687060, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.687124, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.687192, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.687261, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.687321, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.687383, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.687455, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.687517, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.687580, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.687616, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5057 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.687931, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.690677, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.690749, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.690810, 3] smbd/process.c:1661(process_smb) > Transaction 80 of length 176 (0 toread) >[2011/12/15 11:45:31.690871, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.690907, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5121 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.691807, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.692124, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.692186, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.692251, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.692317, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.692381, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.692450, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.692518, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.692579, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.692640, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.692713, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.692775, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.692838, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.692874, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5121 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.693189, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.696006, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.696076, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.696137, 3] smbd/process.c:1661(process_smb) > Transaction 81 of length 166 (0 toread) >[2011/12/15 11:45:31.696198, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.696234, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5185 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.697134, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.697409, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.697471, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.697535, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.697602, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.697666, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.697735, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.697803, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.697863, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.697925, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.697997, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.698059, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.698122, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.698158, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5185 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.698487, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.701152, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.701227, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.701288, 3] smbd/process.c:1661(process_smb) > Transaction 82 of length 176 (0 toread) >[2011/12/15 11:45:31.701349, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.701385, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5249 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.702291, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.702618, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.702682, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.702747, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.702814, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.702879, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.702948, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.703016, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.703077, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.703138, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.703211, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.703273, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.703337, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.703373, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5249 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.703688, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.706401, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.706481, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.706543, 3] smbd/process.c:1661(process_smb) > Transaction 83 of length 182 (0 toread) >[2011/12/15 11:45:31.706603, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.706639, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5313 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.707540, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 44 00 6F .l.d.e.r .:...D.o > [0020] 00 63 00 75 00 6D 00 65 00 6E 00 74 00 53 00 75 .c.u.m.e .n.t.S.u > [0030] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0040] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.707862, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.707924, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.707989, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:DocumentSummaryInformation:$DATA >[2011/12/15 11:45:31.708055, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:DocumentSummaryInformation:$DATA" >[2011/12/15 11:45:31.708119, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.708188, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.708257, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.708317, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.708379, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:DocumentSummaryInformation:$DATA >[2011/12/15 11:45:31.708451, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.708513, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.708576, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.708612, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5313 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.708928, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.711758, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.711830, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.711891, 3] smbd/process.c:1661(process_smb) > Transaction 84 of length 192 (0 toread) >[2011/12/15 11:45:31.711952, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.711988, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5377 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.712889, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 44 00 6F 00 63 00 75 00 6D .f._...D .o.c.u.m > [0030] 00 65 00 6E 00 74 00 53 00 75 00 6D 00 6D 00 61 .e.n.t.S .u.m.m.a > [0040] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0050] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.713254, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.713316, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.713381, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_DocumentSummaryInformation:$DATA >[2011/12/15 11:45:31.713447, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_DocumentSummaryInformation:$DATA" >[2011/12/15 11:45:31.713511, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.713580, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.713649, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.713709, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.713771, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_DocumentSummaryInformation:$DATA >[2011/12/15 11:45:31.713843, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.713906, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.713969, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.714005, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5377 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.714320, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.716986, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.717059, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.717120, 3] smbd/process.c:1661(process_smb) > Transaction 85 of length 182 (0 toread) >[2011/12/15 11:45:31.717181, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.717217, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5441 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.718117, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 44 00 6F .l.d.e.r .:...D.o > [0020] 00 63 00 75 00 6D 00 65 00 6E 00 74 00 53 00 75 .c.u.m.e .n.t.S.u > [0030] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0040] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.718438, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.718514, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.718579, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:DocumentSummaryInformation:$DATA >[2011/12/15 11:45:31.718646, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:DocumentSummaryInformation:$DATA" >[2011/12/15 11:45:31.718710, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.718779, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.718847, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.718908, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.718969, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:DocumentSummaryInformation:$DATA >[2011/12/15 11:45:31.719041, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.719104, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.719167, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.719203, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5441 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.719518, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.722241, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.722399, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.722493, 3] smbd/process.c:1661(process_smb) > Transaction 86 of length 192 (0 toread) >[2011/12/15 11:45:31.722566, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.722608, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5505 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.723686, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 44 00 6F 00 63 00 75 00 6D .f._...D .o.c.u.m > [0030] 00 65 00 6E 00 74 00 53 00 75 00 6D 00 6D 00 61 .e.n.t.S .u.m.m.a > [0040] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0050] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.724225, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.724316, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.724400, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_DocumentSummaryInformation:$DATA >[2011/12/15 11:45:31.724483, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_DocumentSummaryInformation:$DATA" >[2011/12/15 11:45:31.724564, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.724651, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.724740, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.724813, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.724888, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_DocumentSummaryInformation:$DATA >[2011/12/15 11:45:31.724981, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.725058, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.725134, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.725177, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5505 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.725554, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.728741, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.728895, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.728970, 3] smbd/process.c:1661(process_smb) > Transaction 87 of length 166 (0 toread) >[2011/12/15 11:45:31.729042, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.729085, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5569 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.730163, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.730595, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.730685, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.730769, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.730852, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.730932, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.731019, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.731109, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.731182, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.731257, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.731349, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.731426, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.731503, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.731547, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5569 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.731922, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.735094, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.735253, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.735328, 3] smbd/process.c:1661(process_smb) > Transaction 88 of length 176 (0 toread) >[2011/12/15 11:45:31.735400, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.735443, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5633 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.736489, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.736990, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.737077, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.737162, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.737246, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.737326, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.737413, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.737506, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.737579, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.737654, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.737747, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.737824, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.737900, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.737944, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5633 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.738320, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.740397, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.740551, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.740625, 3] smbd/process.c:1661(process_smb) > Transaction 89 of length 166 (0 toread) >[2011/12/15 11:45:31.740697, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.740741, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5697 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.741788, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.742228, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.742317, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.742400, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.742504, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.742584, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.742670, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.742759, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.742833, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.742909, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.743002, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.743079, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.743155, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.743199, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5697 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.743574, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.745650, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.745803, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.745877, 3] smbd/process.c:1661(process_smb) > Transaction 90 of length 176 (0 toread) >[2011/12/15 11:45:31.745949, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.745993, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5761 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.747059, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.747559, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.747650, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.747734, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.747818, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.747897, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.747986, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.748067, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.748128, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.748191, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.748266, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.748331, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.748395, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.748431, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5761 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.748748, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.750889, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.750964, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.751026, 3] smbd/process.c:1661(process_smb) > Transaction 91 of length 166 (0 toread) >[2011/12/15 11:45:31.751087, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.751123, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5825 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.752005, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.752282, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.752368, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.752434, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.752501, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.752566, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.752635, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.752704, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.752764, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.752826, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.752898, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.752960, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.753023, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.753060, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5825 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.753375, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.756119, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.756189, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.756250, 3] smbd/process.c:1661(process_smb) > Transaction 92 of length 176 (0 toread) >[2011/12/15 11:45:31.756311, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.756347, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5889 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.757230, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.757547, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.757609, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.757691, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.757757, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.757822, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.757890, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.757959, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.758019, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.758081, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.758154, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.758216, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.758279, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.758315, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5889 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.758644, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.761364, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:31.761435, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:31.761502, 3] smbd/process.c:1661(process_smb) > Transaction 93 of length 166 (0 toread) >[2011/12/15 11:45:31.761563, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.761599, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5953 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:31.762489, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.762764, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.762826, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.762890, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.762974, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:31.763040, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.763109, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.763177, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.763238, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.763299, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:31.763372, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.763434, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.763497, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.763533, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=5953 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.763850, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.766575, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:31.766647, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:31.766709, 3] smbd/process.c:1661(process_smb) > Transaction 94 of length 176 (0 toread) >[2011/12/15 11:45:31.766769, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.766805, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6017 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:31.767687, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.768003, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.768066, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.768130, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.768214, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:31.768279, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.768348, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.768417, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.768477, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.768539, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:31.768611, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.768674, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.768737, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.768773, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6017 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.769088, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.771875, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.771945, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.772006, 3] smbd/process.c:1661(process_smb) > Transaction 95 of length 182 (0 toread) >[2011/12/15 11:45:31.772067, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.772103, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6081 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.772985, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 65 .l.d.e.r .:...S.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.773306, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.773369, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.773433, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.773499, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.773582, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.773651, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.773720, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.773780, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.773842, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.773914, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.773976, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.774039, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.774075, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6081 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.774391, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.777232, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.777309, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.777370, 3] smbd/process.c:1661(process_smb) > Transaction 96 of length 192 (0 toread) >[2011/12/15 11:45:31.777431, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.777467, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6145 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.778348, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 65 00 62 00 69 00 65 .f._...S .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.778726, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.778789, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.778854, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.778921, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.779003, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.779074, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.779143, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.779203, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.779265, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.779338, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.779400, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.779463, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.779499, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6145 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.779814, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.782461, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.782533, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.782594, 3] smbd/process.c:1661(process_smb) > Transaction 97 of length 182 (0 toread) >[2011/12/15 11:45:31.782654, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.782690, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6209 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.783571, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 65 .l.d.e.r .:...S.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.783893, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.783955, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.784020, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.784086, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.784150, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.784237, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.784306, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.784366, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.784427, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.784500, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.784562, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.784625, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.784661, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6209 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.784976, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.787629, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.787700, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.787761, 3] smbd/process.c:1661(process_smb) > Transaction 98 of length 192 (0 toread) >[2011/12/15 11:45:31.787821, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.787857, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6273 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.788739, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 65 00 62 00 69 00 65 .f._...S .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.789102, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.789165, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.789229, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.789296, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.789360, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.789447, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.789516, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.789576, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.789638, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.789711, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.789772, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.789835, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.789872, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6273 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.790187, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.792835, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.792905, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.792966, 3] smbd/process.c:1661(process_smb) > Transaction 99 of length 182 (0 toread) >[2011/12/15 11:45:31.793027, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.793063, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6337 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.793943, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.794265, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.794327, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.794391, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.794469, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.794535, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.794620, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.794690, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.794751, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.794812, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.794885, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.794947, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.795010, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.795046, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6337 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.795361, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.795409, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:31.795472, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:31.795532, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:31.795648, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:45:31.798096, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.798166, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.798227, 3] smbd/process.c:1661(process_smb) > Transaction 100 of length 192 (0 toread) >[2011/12/15 11:45:31.798288, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.798324, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6401 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.799217, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.799582, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.799645, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:45:31.799711, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:45:31.799816, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:31.799897, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:31.799965, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:31.800030, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:31.800269, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:45:31.800389, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:45:31.800458, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.800525, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.800590, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.800658, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.800728, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.800789, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.800850, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.800923, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.800985, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.801049, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.801085, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6401 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.801400, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.804476, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.804548, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.804610, 3] smbd/process.c:1661(process_smb) > Transaction 101 of length 182 (0 toread) >[2011/12/15 11:45:31.804670, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.804706, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6465 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.805610, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.805933, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.805995, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.806060, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.806127, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.806191, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.806259, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.806328, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.806388, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.806458, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.806531, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.806593, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.806656, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.806692, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6465 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.807008, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.809763, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.809880, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.809963, 3] smbd/process.c:1661(process_smb) > Transaction 102 of length 192 (0 toread) >[2011/12/15 11:45:31.810039, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.810085, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6529 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.811056, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.811427, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.811490, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.811559, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.811626, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.811691, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.811762, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.811833, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.811894, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.811956, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.812030, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.812094, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.812157, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.812200, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6529 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.812516, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.814630, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.814716, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.814778, 3] smbd/process.c:1661(process_smb) > Transaction 103 of length 182 (0 toread) >[2011/12/15 11:45:31.814838, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.814874, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6593 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.815773, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.816094, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.816157, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.816222, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.816289, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.816353, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.816422, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.816492, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.816552, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.816614, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.816686, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.816749, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.816812, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.816848, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6593 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.817164, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.819949, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.820104, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.820179, 3] smbd/process.c:1661(process_smb) > Transaction 104 of length 192 (0 toread) >[2011/12/15 11:45:31.820252, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.820295, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6657 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.821373, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.821911, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.822002, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.822087, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.822170, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.822250, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.822338, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.822428, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.822523, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.822598, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.822691, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.822769, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.822845, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.822889, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6657 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.823265, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.826374, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.826546, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.826621, 3] smbd/process.c:1661(process_smb) > Transaction 105 of length 182 (0 toread) >[2011/12/15 11:45:31.826692, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.826735, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6721 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.827812, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.828292, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.828382, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.828466, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.828549, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.828629, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.828716, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.828805, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.828883, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.828957, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.829051, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.829128, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.829204, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.829247, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6721 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.829625, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.832707, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.832860, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.832936, 3] smbd/process.c:1661(process_smb) > Transaction 106 of length 192 (0 toread) >[2011/12/15 11:45:31.833020, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.833069, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6785 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.834207, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.834793, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.834886, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.834971, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.835055, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.835135, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.835223, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.835312, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.835385, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.835460, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.835555, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.835633, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.835709, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.835753, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6785 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.836129, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.839126, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.839281, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.839355, 3] smbd/process.c:1661(process_smb) > Transaction 107 of length 182 (0 toread) >[2011/12/15 11:45:31.839428, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.839471, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6849 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.840515, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.841025, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.841115, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.841199, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.841283, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.841363, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.841451, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.841542, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.841615, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.841690, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.841783, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.841860, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.841936, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.841980, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6849 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.842354, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.844428, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.844580, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.844654, 3] smbd/process.c:1661(process_smb) > Transaction 108 of length 192 (0 toread) >[2011/12/15 11:45:31.844726, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.844769, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6913 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.845815, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.846381, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.846496, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.846581, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.846664, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.846744, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.846831, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.846922, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.846995, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.847070, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.847163, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.847239, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.847315, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.847359, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6913 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.847727, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.850886, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.850961, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.851023, 3] smbd/process.c:1661(process_smb) > Transaction 109 of length 182 (0 toread) >[2011/12/15 11:45:31.851084, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.851120, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6977 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.852003, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.852354, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.852417, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.852487, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.852555, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.852622, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.852694, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.852767, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.852827, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.852889, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.852963, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.853026, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.853089, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.853125, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=6977 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.853441, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.856234, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.856304, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.856365, 3] smbd/process.c:1661(process_smb) > Transaction 110 of length 192 (0 toread) >[2011/12/15 11:45:31.856426, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.856462, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7041 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.857343, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.857724, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.857786, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.857851, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.857917, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.857981, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.858050, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.858119, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.858179, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.858241, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.858314, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.858376, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.858439, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.858490, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7041 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.858806, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.861448, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.861523, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.861584, 3] smbd/process.c:1661(process_smb) > Transaction 111 of length 182 (0 toread) >[2011/12/15 11:45:31.861645, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.861681, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7105 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.862571, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.862911, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.862974, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.863039, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.863106, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.863170, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.863238, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.863307, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.863367, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.863429, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.863501, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.863563, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.863626, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.863662, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7105 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.863978, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.866616, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.866688, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.866749, 3] smbd/process.c:1661(process_smb) > Transaction 112 of length 192 (0 toread) >[2011/12/15 11:45:31.866810, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.866846, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7169 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.867727, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.868110, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.868172, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.868237, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.868304, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.868368, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.868437, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.868505, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.868566, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.868627, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.868700, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.868762, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.868825, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.868861, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7169 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.869176, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.871933, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.872003, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.872064, 3] smbd/process.c:1661(process_smb) > Transaction 113 of length 182 (0 toread) >[2011/12/15 11:45:31.872125, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.872161, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7233 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.873043, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.873383, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.873446, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.873510, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.873577, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.873641, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.873709, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.873778, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.873839, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.873900, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.873972, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.874034, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.874097, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.874133, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7233 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.874483, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.876695, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.876765, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.876826, 3] smbd/process.c:1661(process_smb) > Transaction 114 of length 192 (0 toread) >[2011/12/15 11:45:31.876887, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.876923, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7297 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.877810, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.878194, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.878256, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.878322, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.878388, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.878460, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.878529, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.878598, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.878659, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.878720, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.878793, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.878855, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.878918, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.878955, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7297 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.879270, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.881946, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.882019, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.882080, 3] smbd/process.c:1661(process_smb) > Transaction 115 of length 182 (0 toread) >[2011/12/15 11:45:31.882141, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.882176, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7361 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.883070, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.883410, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.883474, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.883538, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.883605, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.883669, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.883738, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.883807, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.883867, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.883928, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.884000, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.884062, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.884126, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.884162, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7361 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.884477, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.887188, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.887260, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.887321, 3] smbd/process.c:1661(process_smb) > Transaction 116 of length 192 (0 toread) >[2011/12/15 11:45:31.887382, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.887418, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7425 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.888298, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.888662, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.888741, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.888806, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.888872, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.888937, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.889005, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.889074, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.889135, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.889196, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.889269, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.889331, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.889394, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.889430, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7425 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.889747, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.892507, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.892577, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.892638, 3] smbd/process.c:1661(process_smb) > Transaction 117 of length 182 (0 toread) >[2011/12/15 11:45:31.892698, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.892734, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7489 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.893616, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.893937, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.894017, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.894083, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.894150, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.894214, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.894282, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.894351, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.894412, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.894485, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.894558, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.894621, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.894684, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.894720, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7489 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.895035, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.897738, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.897810, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.897871, 3] smbd/process.c:1661(process_smb) > Transaction 118 of length 192 (0 toread) >[2011/12/15 11:45:31.897932, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.897968, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7553 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.898862, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.899227, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.899289, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.899372, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.899439, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:45:31.899503, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.899571, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.899640, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.899701, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.899762, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:45:31.899835, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.899897, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.899960, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.899996, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7553 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.900311, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.902964, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.903036, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.903097, 3] smbd/process.c:1661(process_smb) > Transaction 119 of length 182 (0 toread) >[2011/12/15 11:45:31.903158, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.903193, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7617 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.904075, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.904397, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.904459, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.904545, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.904613, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.904677, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.904746, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.904815, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.904875, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.904937, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.905009, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.905071, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.905134, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.905170, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7617 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.905485, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.908122, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.908193, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.908254, 3] smbd/process.c:1661(process_smb) > Transaction 120 of length 192 (0 toread) >[2011/12/15 11:45:31.908314, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.908350, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7681 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.909233, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.909597, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.909659, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.909724, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.909808, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.909873, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.909941, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.910010, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.910071, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.910132, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.910205, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.910267, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.910330, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.910366, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7681 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.910693, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.913403, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.913479, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.913540, 3] smbd/process.c:1661(process_smb) > Transaction 121 of length 182 (0 toread) >[2011/12/15 11:45:31.913601, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.913637, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7745 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.914526, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.914847, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.914910, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.914975, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.915056, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.915122, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.915190, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.915259, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.915319, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.915381, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.915453, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.915515, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.915579, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.915615, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7745 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.915930, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.918622, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.918697, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.918782, 3] smbd/process.c:1661(process_smb) > Transaction 122 of length 192 (0 toread) >[2011/12/15 11:45:31.918855, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.918898, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7809 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.919939, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.920476, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.920565, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.920649, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.920763, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.920845, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.920931, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.921020, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.921093, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.921167, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.921260, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.921337, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.921413, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.921459, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7809 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.921835, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.924994, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.925147, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.925221, 3] smbd/process.c:1661(process_smb) > Transaction 123 of length 182 (0 toread) >[2011/12/15 11:45:31.925292, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.925335, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7873 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.926381, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.926879, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.926971, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.927055, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.927168, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.927250, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.927336, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.927425, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.927499, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.927574, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.927668, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.927745, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.927822, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.927865, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7873 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.928241, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.931363, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.931515, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.931590, 3] smbd/process.c:1661(process_smb) > Transaction 124 of length 192 (0 toread) >[2011/12/15 11:45:31.931662, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.931705, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7937 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.932789, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.933371, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.933449, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.933535, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.933650, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.933732, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.933819, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.933908, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.933980, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.934055, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.934148, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.934226, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.934302, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.934345, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=7937 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.934743, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.937752, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.937906, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.937980, 3] smbd/process.c:1661(process_smb) > Transaction 125 of length 182 (0 toread) >[2011/12/15 11:45:31.938053, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.938096, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8001 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.939159, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.939635, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.939723, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.939807, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.939891, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.940003, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.940090, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.940179, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.940251, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.940326, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.940419, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.940496, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.940573, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.940616, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8001 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.940991, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.944184, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.944339, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.944413, 3] smbd/process.c:1661(process_smb) > Transaction 126 of length 192 (0 toread) >[2011/12/15 11:45:31.944486, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.944529, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8065 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.945576, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.946112, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.946204, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.946289, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.946373, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:31.946506, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.946594, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.946683, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.946756, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.946831, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:31.946924, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.947001, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.947080, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.947127, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8065 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.947445, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.949436, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.949515, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.949577, 3] smbd/process.c:1661(process_smb) > Transaction 127 of length 182 (0 toread) >[2011/12/15 11:45:31.949637, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.949673, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8129 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.950564, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 45 00 70 .l.d.e.r .:...E.p > [0020] 00 67 00 79 00 6B 00 78 00 30 00 76 00 4A 00 65 .g.y.k.x .0.v.J.e > [0030] 00 63 00 6B 00 75 00 32 00 34 00 77 00 31 00 76 .c.k.u.2 .4.w.1.v > [0040] 00 62 00 76 00 68 00 35 00 6B 00 32 00 4E 00 68 .b.v.h.5 .k.2.N.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.950888, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.950950, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.951019, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:45:31.951087, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA" >[2011/12/15 11:45:31.951153, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.951249, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.951320, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.951380, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.951442, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:45:31.951515, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.951577, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.951640, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.951676, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8129 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.951991, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.954712, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.954784, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.954845, 3] smbd/process.c:1661(process_smb) > Transaction 128 of length 192 (0 toread) >[2011/12/15 11:45:31.954906, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.954941, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8193 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.955826, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 45 00 70 00 67 00 79 00 6B .f._...E .p.g.y.k > [0030] 00 78 00 30 00 76 00 4A 00 65 00 63 00 6B 00 75 .x.0.v.J .e.c.k.u > [0040] 00 32 00 34 00 77 00 31 00 76 00 62 00 76 00 68 .2.4.w.1 .v.b.v.h > [0050] 00 35 00 6B 00 32 00 4E 00 68 00 3A 00 24 00 44 .5.k.2.N .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.956190, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.956252, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.956316, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:45:31.956383, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA" >[2011/12/15 11:45:31.956447, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.956534, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.956603, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.956663, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.956724, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:45:31.956797, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.956859, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.956922, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.956958, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8193 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.957272, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.960044, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.960114, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.960175, 3] smbd/process.c:1661(process_smb) > Transaction 129 of length 182 (0 toread) >[2011/12/15 11:45:31.960236, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.960271, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8257 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.961153, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 45 00 70 .l.d.e.r .:...E.p > [0020] 00 67 00 79 00 6B 00 78 00 30 00 76 00 4A 00 65 .g.y.k.x .0.v.J.e > [0030] 00 63 00 6B 00 75 00 32 00 34 00 77 00 31 00 76 .c.k.u.2 .4.w.1.v > [0040] 00 62 00 76 00 68 00 35 00 6B 00 32 00 4E 00 68 .b.v.h.5 .k.2.N.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.961474, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.961536, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.961600, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:45:31.961666, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA" >[2011/12/15 11:45:31.961730, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.961815, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.961884, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.961944, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.962006, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:45:31.962078, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.962139, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.962202, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.962238, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8257 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.962566, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.965248, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.965318, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.965379, 3] smbd/process.c:1661(process_smb) > Transaction 130 of length 192 (0 toread) >[2011/12/15 11:45:31.965439, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.965481, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8321 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.966363, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 45 00 70 00 67 00 79 00 6B .f._...E .p.g.y.k > [0030] 00 78 00 30 00 76 00 4A 00 65 00 63 00 6B 00 75 .x.0.v.J .e.c.k.u > [0040] 00 32 00 34 00 77 00 31 00 76 00 62 00 76 00 68 .2.4.w.1 .v.b.v.h > [0050] 00 35 00 6B 00 32 00 4E 00 68 00 3A 00 24 00 44 .5.k.2.N .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.966734, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.966797, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.966861, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:45:31.966928, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA" >[2011/12/15 11:45:31.966992, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.967078, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.967148, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.967208, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.967269, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:45:31.967342, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.967404, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.967467, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.967503, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8321 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.967818, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.970555, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.970627, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.970688, 3] smbd/process.c:1661(process_smb) > Transaction 131 of length 182 (0 toread) >[2011/12/15 11:45:31.970749, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.970784, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8385 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.971666, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.971986, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.972049, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.972113, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.972179, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:31.972242, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.972311, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.972397, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.972458, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.972519, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.972598, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.972676, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.972751, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.972788, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8385 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.973105, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.975907, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.975982, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.976043, 3] smbd/process.c:1661(process_smb) > Transaction 132 of length 192 (0 toread) >[2011/12/15 11:45:31.976104, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.976140, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8449 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.977024, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.977389, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.977451, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.977517, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.977584, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:31.977649, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.977718, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.977805, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.977867, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.977928, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.978002, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.978064, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.978127, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.978163, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8449 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.978491, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.981213, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.981283, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.981344, 3] smbd/process.c:1661(process_smb) > Transaction 133 of length 182 (0 toread) >[2011/12/15 11:45:31.981405, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.981441, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8513 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.982329, 10] ../lib/util/util.c:415(dump_data) > [0000] FF 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.982658, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.982720, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.982785, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.982851, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:31.982915, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.982983, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.983052, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.983128, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.983190, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.983263, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.983325, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.983389, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.983425, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8513 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.983739, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.986530, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.986602, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.986663, 3] smbd/process.c:1661(process_smb) > Transaction 134 of length 192 (0 toread) >[2011/12/15 11:45:31.986723, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.986759, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8577 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.987642, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.988005, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.988067, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.988132, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.988198, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:31.988262, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.988331, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.988399, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.988477, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.988540, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.988613, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.988675, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.988738, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.988774, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8577 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.989089, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.991744, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:31.991814, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:31.991875, 3] smbd/process.c:1661(process_smb) > Transaction 135 of length 182 (0 toread) >[2011/12/15 11:45:31.991936, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.991972, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8641 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:31.992853, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:31.993174, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.993236, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.993301, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.993367, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:31.993431, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.993499, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.993568, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.993628, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.993708, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.993781, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.993843, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.993906, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.993943, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8641 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.994257, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:31.997048, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:31.997118, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:31.997179, 3] smbd/process.c:1661(process_smb) > Transaction 136 of length 192 (0 toread) >[2011/12/15 11:45:31.997239, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.997275, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8705 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:31.998157, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:31.998535, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:31.998598, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:31.998663, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.998729, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:31.998793, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:31.998861, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:31.998930, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:31.998990, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:31.999069, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:31.999143, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.999206, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:31.999269, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:31.999305, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8705 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:31.999620, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.002290, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.002364, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.002426, 3] smbd/process.c:1661(process_smb) > Transaction 137 of length 182 (0 toread) >[2011/12/15 11:45:32.002498, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.002535, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8769 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.003417, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.003738, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.003801, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.003866, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:32.003932, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:32.003996, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.004065, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.004134, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.004195, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.004256, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:32.004347, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.004410, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.004473, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.004509, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8769 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.004825, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.007496, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.007567, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.007628, 3] smbd/process.c:1661(process_smb) > Transaction 138 of length 192 (0 toread) >[2011/12/15 11:45:32.007689, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.007725, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8833 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.008608, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.008971, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.009034, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.009098, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:32.009165, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:45:32.009229, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.009297, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.009366, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.009427, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.009489, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:45:32.009580, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.009643, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.009706, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.009742, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8833 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.010058, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.012744, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.012814, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.012875, 3] smbd/process.c:1661(process_smb) > Transaction 139 of length 182 (0 toread) >[2011/12/15 11:45:32.012936, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.012972, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8897 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.013856, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.014178, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.014241, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.014305, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.014372, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.014436, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.014517, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.014587, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.014648, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.014709, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.014799, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.014862, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.014926, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.014962, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8897 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.015278, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.017967, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.018039, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.018100, 3] smbd/process.c:1661(process_smb) > Transaction 140 of length 192 (0 toread) >[2011/12/15 11:45:32.018161, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.018197, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8961 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.019090, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.019572, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.019656, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.019738, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.019820, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.019900, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.019986, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.020073, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.020146, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.020220, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.020343, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.020420, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.020497, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.020540, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=8961 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.020913, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.023163, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.023318, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.023392, 3] smbd/process.c:1661(process_smb) > Transaction 141 of length 182 (0 toread) >[2011/12/15 11:45:32.023465, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.023508, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9025 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.024553, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.025029, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.025117, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.025202, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.025285, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.025366, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.025454, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.025545, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.025619, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.025694, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.025815, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.025893, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.025970, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.026013, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9025 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.026388, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.029506, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.029660, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.029734, 3] smbd/process.c:1661(process_smb) > Transaction 142 of length 192 (0 toread) >[2011/12/15 11:45:32.029806, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.029850, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9089 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.030917, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.031454, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.031546, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.031630, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.031714, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.031794, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.031882, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.031970, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.032044, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.032118, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.032243, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.032322, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.032399, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.032443, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9089 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.032818, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.035889, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.036046, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.036120, 3] smbd/process.c:1661(process_smb) > Transaction 143 of length 182 (0 toread) >[2011/12/15 11:45:32.036192, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.036236, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9153 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.037281, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.037759, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.037849, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.037934, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.038017, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.038098, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.038185, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.038273, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.038346, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.038421, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.038535, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.038643, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.038720, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.038764, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9153 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.039138, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.042259, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.042412, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.042504, 3] smbd/process.c:1661(process_smb) > Transaction 144 of length 192 (0 toread) >[2011/12/15 11:45:32.042577, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.042621, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9217 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.043665, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.044200, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.044292, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.044378, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.044461, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.044541, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.044628, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.044717, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.044790, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.044864, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.044957, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.045066, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.045142, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.045186, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9217 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.045563, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.047557, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.047687, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.047749, 3] smbd/process.c:1661(process_smb) > Transaction 145 of length 182 (0 toread) >[2011/12/15 11:45:32.047810, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.047846, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9281 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.048732, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.049057, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.049121, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.049191, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.049260, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.049327, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.049400, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.049473, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.049534, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.049596, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.049672, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.049736, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.049825, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.049862, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9281 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.050177, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.052619, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.052689, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.052751, 3] smbd/process.c:1661(process_smb) > Transaction 146 of length 192 (0 toread) >[2011/12/15 11:45:32.052811, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.052848, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9345 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.053731, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.054095, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.054158, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.054223, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.054289, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.054354, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.054422, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.054510, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.054571, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.054633, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.054706, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.054769, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.054851, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.054887, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9345 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.055203, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.057857, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.057929, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.057990, 3] smbd/process.c:1661(process_smb) > Transaction 147 of length 182 (0 toread) >[2011/12/15 11:45:32.058051, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.058087, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9409 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.058983, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.059306, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.059368, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.059433, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.059499, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.059564, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.059632, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.059702, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.059763, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.059824, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.059897, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.059959, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.060041, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.060078, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9409 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.060394, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.063112, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.063185, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.063246, 3] smbd/process.c:1661(process_smb) > Transaction 148 of length 192 (0 toread) >[2011/12/15 11:45:32.063307, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.063343, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9473 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.064226, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.064591, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.064654, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.064719, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.064786, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.064851, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.064919, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.064989, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.065049, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.065111, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.065184, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.065247, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.065310, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.065363, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9473 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.065680, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.068288, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.068358, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.068420, 3] smbd/process.c:1661(process_smb) > Transaction 149 of length 182 (0 toread) >[2011/12/15 11:45:32.068481, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.068517, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9537 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.069400, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.069721, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.069784, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.069849, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.069915, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.069979, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.070048, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.070117, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.070177, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.070239, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.070311, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.070373, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.070437, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.070488, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9537 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.070822, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.070870, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:32.070933, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:32.071003, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:32.071109, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:45:32.073487, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.073558, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.073619, 3] smbd/process.c:1661(process_smb) > Transaction 150 of length 192 (0 toread) >[2011/12/15 11:45:32.073680, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.073716, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9601 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.074613, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.074978, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.075041, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:45:32.075107, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:45:32.075194, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:32.075274, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:32.075343, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:32.075408, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:32.075647, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:45:32.075766, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:45:32.075836, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.075926, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.075990, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.076059, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.076131, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.076192, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.076253, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.076327, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.076389, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.076453, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.076489, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9601 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.076805, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.079817, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.079889, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.079951, 3] smbd/process.c:1661(process_smb) > Transaction 151 of length 182 (0 toread) >[2011/12/15 11:45:32.080012, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.080048, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9665 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.080931, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 43 00 70 .l.d.e.r .:...C.p > [0020] 00 64 00 6A 00 78 00 77 00 62 00 68 00 4E 00 32 .d.j.x.w .b.h.N.2 > [0030] 00 71 00 7A 00 65 00 77 00 63 00 6D 00 51 00 70 .q.z.e.w .c.m.Q.p > [0040] 00 63 00 61 00 31 00 6C 00 76 00 79 00 58 00 63 .c.a.1.l .v.y.X.c > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.081252, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.081315, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.081380, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.081468, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:45:32.081534, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.081602, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.081671, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.081732, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.081794, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.081866, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.081928, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.081992, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.082028, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9665 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.082343, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.085042, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.085112, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.085174, 3] smbd/process.c:1661(process_smb) > Transaction 152 of length 192 (0 toread) >[2011/12/15 11:45:32.085234, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.085270, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9729 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.086159, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 43 00 70 00 64 00 6A 00 78 .f._...C .p.d.j.x > [0030] 00 77 00 62 00 68 00 4E 00 32 00 71 00 7A 00 65 .w.b.h.N .2.q.z.e > [0040] 00 77 00 63 00 6D 00 51 00 70 00 63 00 61 00 31 .w.c.m.Q .p.c.a.1 > [0050] 00 6C 00 76 00 79 00 58 00 63 00 3A 00 24 00 44 .l.v.y.X .c.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.086538, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.086600, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.086665, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.086749, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:45:32.086815, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.086883, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.086952, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.087013, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.087074, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.087147, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.087209, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.087273, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.087309, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9729 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.087624, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.090371, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.090453, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.090517, 3] smbd/process.c:1661(process_smb) > Transaction 153 of length 182 (0 toread) >[2011/12/15 11:45:32.090577, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.090613, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9793 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.091497, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 43 00 70 .l.d.e.r .:...C.p > [0020] 00 64 00 6A 00 78 00 77 00 62 00 68 00 4E 00 32 .d.j.x.w .b.h.N.2 > [0030] 00 71 00 7A 00 65 00 77 00 63 00 6D 00 51 00 70 .q.z.e.w .c.m.Q.p > [0040] 00 63 00 61 00 31 00 6C 00 76 00 79 00 58 00 63 .c.a.1.l .v.y.X.c > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.091819, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.091881, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.091946, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.092030, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:45:32.092095, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.092163, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.092232, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.092293, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.092354, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.092427, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.092489, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.092552, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.092588, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9793 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.092904, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.095565, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.095637, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.095698, 3] smbd/process.c:1661(process_smb) > Transaction 154 of length 192 (0 toread) >[2011/12/15 11:45:32.095759, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.095795, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9857 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.096679, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 43 00 70 00 64 00 6A 00 78 .f._...C .p.d.j.x > [0030] 00 77 00 62 00 68 00 4E 00 32 00 71 00 7A 00 65 .w.b.h.N .2.q.z.e > [0040] 00 77 00 63 00 6D 00 51 00 70 00 63 00 61 00 31 .w.c.m.Q .p.c.a.1 > [0050] 00 6C 00 76 00 79 00 58 00 63 00 3A 00 24 00 44 .l.v.y.X .c.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.097043, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.097105, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.097170, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.097252, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:45:32.097318, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.097386, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.097455, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.097516, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.097577, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.097650, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.097712, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.097776, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.097812, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9857 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.098127, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.100770, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.100840, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.100901, 3] smbd/process.c:1661(process_smb) > Transaction 155 of length 182 (0 toread) >[2011/12/15 11:45:32.100962, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.100998, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9921 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.101881, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 43 00 70 .l.d.e.r .:...C.p > [0020] 00 64 00 6A 00 78 00 77 00 62 00 68 00 4E 00 32 .d.j.x.w .b.h.N.2 > [0030] 00 71 00 7A 00 65 00 77 00 63 00 6D 00 51 00 70 .q.z.e.w .c.m.Q.p > [0040] 00 63 00 61 00 31 00 6C 00 76 00 79 00 58 00 63 .c.a.1.l .v.y.X.c > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.102202, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.102264, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.102329, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.102395, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:45:32.102490, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.102559, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.102628, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.102689, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.102750, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.102822, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.102884, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.102947, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.102984, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9921 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.103298, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.106029, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.106100, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.106161, 3] smbd/process.c:1661(process_smb) > Transaction 156 of length 192 (0 toread) >[2011/12/15 11:45:32.106222, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.106258, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9985 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.107151, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 43 00 70 00 64 00 6A 00 78 .f._...C .p.d.j.x > [0030] 00 77 00 62 00 68 00 4E 00 32 00 71 00 7A 00 65 .w.b.h.N .2.q.z.e > [0040] 00 77 00 63 00 6D 00 51 00 70 00 63 00 61 00 31 .w.c.m.Q .p.c.a.1 > [0050] 00 6C 00 76 00 79 00 58 00 63 00 3A 00 24 00 44 .l.v.y.X .c.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.107516, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.107578, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.107643, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.107709, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:45:32.107790, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.107859, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.107928, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.107989, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.108050, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.108123, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.108185, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.108248, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.108285, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=9985 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.108600, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.111295, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.111367, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.111428, 3] smbd/process.c:1661(process_smb) > Transaction 157 of length 182 (0 toread) >[2011/12/15 11:45:32.111489, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.111525, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10049 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.112409, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 43 00 70 .l.d.e.r .:...C.p > [0020] 00 64 00 6A 00 78 00 77 00 62 00 68 00 4E 00 32 .d.j.x.w .b.h.N.2 > [0030] 00 71 00 7A 00 65 00 77 00 63 00 6D 00 51 00 70 .q.z.e.w .c.m.Q.p > [0040] 00 63 00 61 00 31 00 6C 00 76 00 79 00 58 00 63 .c.a.1.l .v.y.X.c > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.112730, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.112792, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.112857, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.112923, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:45:32.112987, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.113073, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.113142, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.113202, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.113264, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.113336, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.113399, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.113462, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.113498, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10049 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.113813, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.116492, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.116568, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.116629, 3] smbd/process.c:1661(process_smb) > Transaction 158 of length 192 (0 toread) >[2011/12/15 11:45:32.116690, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.116726, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10113 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.117616, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 43 00 70 00 64 00 6A 00 78 .f._...C .p.d.j.x > [0030] 00 77 00 62 00 68 00 4E 00 32 00 71 00 7A 00 65 .w.b.h.N .2.q.z.e > [0040] 00 77 00 63 00 6D 00 51 00 70 00 63 00 61 00 31 .w.c.m.Q .p.c.a.1 > [0050] 00 6C 00 76 00 79 00 58 00 63 00 3A 00 24 00 44 .l.v.y.X .c.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.117980, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.118043, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.118108, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.118174, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:45:32.118238, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.118324, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.118393, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.118481, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.118559, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:45:32.118650, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.118724, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.118800, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.118843, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10113 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.119218, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.121543, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:32.121697, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:32.121771, 3] smbd/process.c:1661(process_smb) > Transaction 159 of length 166 (0 toread) >[2011/12/15 11:45:32.121843, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.121886, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10177 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:32.122955, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.123365, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.123450, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.123534, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:32.123616, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:32.123696, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.123783, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.123903, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.123977, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.124051, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:32.124143, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.124220, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.124296, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.124339, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10177 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.124713, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.127860, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:32.128014, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:32.128089, 3] smbd/process.c:1661(process_smb) > Transaction 160 of length 176 (0 toread) >[2011/12/15 11:45:32.128161, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.128204, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10241 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:32.129249, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.129719, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.129805, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.129889, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:32.129972, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:32.130052, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.130139, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.130227, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.130331, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.130406, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:32.130520, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.130598, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.130674, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.130717, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10241 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.131091, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.134201, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:45:32.134359, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:45:32.134433, 3] smbd/process.c:1661(process_smb) > Transaction 161 of length 166 (0 toread) >[2011/12/15 11:45:32.134522, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.134566, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10305 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:45:32.135614, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.136024, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.136110, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.136194, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:32.136276, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:45:32.136356, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.136443, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.136531, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.136604, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.136709, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:45:32.136804, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.136884, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.136960, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.137003, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10305 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.137378, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.139491, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:45:32.139645, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:45:32.139719, 3] smbd/process.c:1661(process_smb) > Transaction 162 of length 176 (0 toread) >[2011/12/15 11:45:32.139791, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.139834, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10369 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:45:32.140878, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.141347, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.141433, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.141519, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:32.141604, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:45:32.141685, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.141773, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.141863, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.141938, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.142014, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:45:32.142139, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.142219, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.142296, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.142340, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10369 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.142740, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.144815, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.144966, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.145041, 3] smbd/process.c:1661(process_smb) > Transaction 163 of length 182 (0 toread) >[2011/12/15 11:45:32.145113, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.145157, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10433 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.146203, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.146705, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.146782, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.146852, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.146921, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.146989, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.147062, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.147135, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.147196, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.147258, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.147358, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.147423, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.147487, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.147523, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10433 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.147839, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.150024, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.150098, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.150159, 3] smbd/process.c:1661(process_smb) > Transaction 164 of length 192 (0 toread) >[2011/12/15 11:45:32.150220, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.150256, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10497 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.151150, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.151515, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.151577, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.151642, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.151709, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.151773, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.151841, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.151910, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.151971, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.152032, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.152123, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.152186, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.152249, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.152285, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10497 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.152600, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.155291, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.155363, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.155424, 3] smbd/process.c:1661(process_smb) > Transaction 165 of length 182 (0 toread) >[2011/12/15 11:45:32.155485, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.155521, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10561 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.156403, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.156724, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.156787, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.156851, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.156917, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.156981, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.157050, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.157118, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.157179, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.157240, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.157330, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.157394, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.157457, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.157493, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10561 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.157808, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.160524, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.160594, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.160655, 3] smbd/process.c:1661(process_smb) > Transaction 166 of length 192 (0 toread) >[2011/12/15 11:45:32.160716, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.160752, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10625 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.161634, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.161997, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.162059, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.162124, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.162190, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.162254, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.162323, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.162391, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.162463, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.162527, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.162617, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.162680, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.162743, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.162780, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10625 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.163094, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.165840, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.165912, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.165973, 3] smbd/process.c:1661(process_smb) > Transaction 167 of length 182 (0 toread) >[2011/12/15 11:45:32.166033, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.166069, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10689 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.166963, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.167285, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.167347, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.167412, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.167478, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.167542, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.167611, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.167679, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.167740, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.167801, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.167873, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.167953, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.168018, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.168054, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10689 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.168369, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.171100, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.171172, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.171233, 3] smbd/process.c:1661(process_smb) > Transaction 168 of length 192 (0 toread) >[2011/12/15 11:45:32.171294, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.171330, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10753 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.172213, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.172576, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.172638, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.172703, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.172769, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.172833, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.172902, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.172970, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.173031, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.173092, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.173165, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.173244, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.173309, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.173345, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10753 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.173660, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.176367, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.176439, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.176501, 3] smbd/process.c:1661(process_smb) > Transaction 169 of length 182 (0 toread) >[2011/12/15 11:45:32.176561, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.176597, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10817 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.177480, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.177801, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.177863, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.177928, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.177994, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.178059, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.178127, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.178196, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.178256, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.178318, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.178390, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.178464, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.178545, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.178582, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10817 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.178898, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.181593, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.181665, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.181726, 3] smbd/process.c:1661(process_smb) > Transaction 170 of length 192 (0 toread) >[2011/12/15 11:45:32.181787, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.181822, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10881 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.182716, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.183081, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.183143, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.183208, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.183275, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.183339, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.183408, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.183476, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.183537, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.183598, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.183671, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.183733, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.183813, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.183850, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10881 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.184165, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.186838, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.186910, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.186971, 3] smbd/process.c:1661(process_smb) > Transaction 171 of length 182 (0 toread) >[2011/12/15 11:45:32.187032, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.187068, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10945 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.187951, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.188271, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.188333, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.188398, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.188464, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.188528, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.188596, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.188665, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.188725, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.188787, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.188859, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.188921, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.188984, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.189038, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=10945 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.189354, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.192064, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.192134, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.192195, 3] smbd/process.c:1661(process_smb) > Transaction 172 of length 192 (0 toread) >[2011/12/15 11:45:32.192256, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.192292, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11009 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.193175, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.193540, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.193603, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.193667, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.193733, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.193797, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.193866, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.193935, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.193995, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.194056, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.194129, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.194191, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.194254, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.194306, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11009 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.194636, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.197248, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:45:32.197318, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:45:32.197379, 3] smbd/process.c:1661(process_smb) > Transaction 173 of length 182 (0 toread) >[2011/12/15 11:45:32.197439, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.197482, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11073 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:45:32.198365, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:45:32.198694, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.198757, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.198821, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.198888, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.198952, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.199020, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.199089, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.199149, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.199211, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.199283, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.199345, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.199409, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.199445, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11073 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.199778, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.202496, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:45:32.202568, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:45:32.202629, 3] smbd/process.c:1661(process_smb) > Transaction 174 of length 192 (0 toread) >[2011/12/15 11:45:32.202690, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.202725, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11137 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:45:32.203609, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:45:32.203972, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.204034, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.204099, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.204166, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:45:32.204230, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:45:32.204299, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:45:32.204368, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:45:32.204428, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:45:32.204490, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:45:32.204562, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.204624, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.204688, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.204724, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11137 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.205057, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.207743, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:45:32.207814, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:45:32.207875, 3] smbd/process.c:1661(process_smb) > Transaction 175 of length 45 (0 toread) >[2011/12/15 11:45:32.207936, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.207972, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11201 > smt_wct=3 > smb_vwv[ 0]=17532 (0x447C) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:45:32.208358, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.208396, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.208458, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.208524, 3] smbd/reply.c:4841(reply_close) > close directory fnum=17532 >[2011/12/15 11:45:32.208599, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 0007000000000000518E >[2011/12/15 11:45:32.208674, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x221267e8 >[2011/12/15 11:45:32.208736, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:32.208839, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0xf81, type= 0x0, gen_id = 56, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:45:32.208905, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:45:32.208980, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 0007000000000000518E >[2011/12/15 11:45:32.209058, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file test_folder = 0 >[2011/12/15 11:45:32.209123, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file test_folder >[2011/12/15 11:45:32.209191, 5] smbd/files.c:464(file_free) > freed files structure 17532 (1 used) >[2011/12/15 11:45:32.209255, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.209292, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11201 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.209607, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.212785, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:32.212856, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:32.212917, 3] smbd/process.c:1661(process_smb) > Transaction 176 of length 112 (0 toread) >[2011/12/15 11:45:32.212978, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.213014, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11265 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:45:32.213685, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:45:32.213881, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.213944, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.214012, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:45:32.214082, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:32.214146, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [TEST_IMG.BMP] >[2011/12/15 11:45:32.214208, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = test_img.bmp, dirpath = , start = test_img.bmp >[2011/12/15 11:45:32.214278, 5] smbd/statcache.c:143(stat_cache_add) > stat_cache_add: Added entry (221268e8:size c) TEST_IMG.BMP -> test_img.bmp >[2011/12/15 11:45:32.214340, 5] smbd/filename.c:439(unix_convert) > conversion of base_name finished test_img.bmp -> test_img.bmp >[2011/12/15 11:45:32.214402, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:32.214485, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:32.214547, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:32.214609, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:45:32.214671, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:45:32.214732, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:32.214795, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:32.214856, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:32.214929, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:45:32.214991, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:45:32.215052, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:45:32.215128, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x2210f9b0 now at offset -1 >[2011/12/15 11:45:32.215196, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:45:32.215259, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:32.215321, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:32.215396, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:32.215458, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:45:32.215526, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:45:32.215588, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:32.215653, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:45:32.215715, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:45:32.215782, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:45:32.215844, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:45:32.215921, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.215958, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11265 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:45:32.216510, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 BC 32 ........ 7......2 > [0020] 5D FD BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 ]....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:45:32.216977, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:45:32.223327, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 112 >[2011/12/15 11:45:32.223485, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x70 >[2011/12/15 11:45:32.223559, 3] smbd/process.c:1661(process_smb) > Transaction 177 of length 116 (0 toread) >[2011/12/15 11:45:32.223631, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.223674, 5] lib/util.c:342(show_msg) > size=112 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11329 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6656 (0x1A00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=29 >[2011/12/15 11:45:32.224718, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D .\.t.e.s .t._.i.m > [0010] 00 67 00 2E 00 62 00 6D 00 70 00 00 00 .g...b.m .p... >[2011/12/15 11:45:32.224921, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.225000, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.225083, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = test_img.bmp >[2011/12/15 11:45:32.225167, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:32.225248, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:45:32.225332, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:32.225422, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:32.225498, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:32.225602, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:45:32.225690, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:32.225775, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:32.225848, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:32.225921, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:45:32.226011, 5] smbd/files.c:126(file_new) > allocated file structure 13437, fnum = 17533 (2 used) >[2011/12/15 11:45:32.226093, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_img.bmp hash 0x277862db >[2011/12/15 11:45:32.226171, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(test_img.bmp) returning 0744 >[2011/12/15 11:45:32.226245, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=test_img.bmp, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:32.226327, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:32.226416, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:32.226511, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:32.226585, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:45:32.226660, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:32.226736, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:32.226813, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=test_img.bmp, after mapping access_mask=0x20089 >[2011/12/15 11:45:32.226907, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:45:32.227004, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bd8 >[2011/12/15 11:45:32.227079, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:c:0 >[2011/12/15 11:45:32.227157, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:45:32.227269, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:45:32.227351, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d48 >[2011/12/15 11:45:32.227427, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file test_img.bmp >[2011/12/15 11:45:32.227502, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:32.227590, 10] smbd/open.c:179(fd_open) > fd_open: name test_img.bmp, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:32.227666, 2] smbd/open.c:694(open_file) > nobody opened file test_img.bmp read=Yes write=No (numopen=2) >[2011/12/15 11:45:32.227758, 3] smbd/oplock_linux.c:129(linux_set_kernel_oplock) > linux_set_kernel_oplock: got kernel oplock on file test_img.bmp, file_id = 700:c:0 gen_id = 57 >[2011/12/15 11:45:32.227837, 5] smbd/oplock.c:92(set_file_oplock) > set_file_oplock: granted oplock on file test_img.bmp, 700:c:0/57, tv_sec = 4ee9a59c, tv_usec = 372d8 >[2011/12/15 11:45:32.227923, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 1 >[2011/12/15 11:45:32.228082, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2c41, type= 0x3, gen_id = 57, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:32.228193, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:45:32.228289, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:45:32.228361, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:45:32.228438, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:45:32.228513, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:32.228587, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:32.228676, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:32.228802, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2c41, type= 0x3, gen_id = 57, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:32.228895, 10] smbd/file_access.c:207(can_access_file_data) > can_access_file_data: requesting 0x2 on file test_img.bmp >[2011/12/15 11:45:32.228970, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 17533, open name = test_img.bmp >[2011/12/15 11:45:32.232628, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:45:32.248873, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:45:32.249356, 3] smbd/process.c:1661(process_smb) > Transaction 178 of length 76 (0 toread) >[2011/12/15 11:45:32.249441, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.249493, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11393 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:45:32.250200, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 7D 44 EE 03 ...}D.. >[2011/12/15 11:45:32.250286, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.250350, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.250417, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 >[2011/12/15 11:45:32.250515, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:32.250620, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2c41, type= 0x3, gen_id = 57, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:32.250685, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x277862db >[2011/12/15 11:45:32.250747, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_img.bmp (fnum = 17533) level=1006 call=7 total_data=0 >[2011/12/15 11:45:32.250923, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_img.bmp (fnum = 17533) level=1006 max_data=40 >[2011/12/15 11:45:32.251004, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:45:32.251085, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:32.251158, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:32.251228, 10] smbd/trans2.c:4620(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION >[2011/12/15 11:45:32.251292, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 >[2011/12/15 11:45:32.251354, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 >[2011/12/15 11:45:32.251416, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.251452, 5] lib/util.c:342(show_msg) > size=68 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11393 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 8 (0x8) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 8 (0x8) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=13 >[2011/12/15 11:45:32.252008, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 0C 00 00 00 00 00 00 00 ........ ..... >[2011/12/15 11:45:32.254359, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.254433, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.254507, 3] smbd/process.c:1661(process_smb) > Transaction 179 of length 63 (0 toread) >[2011/12/15 11:45:32.254568, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.254605, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11457 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17533 (0x447D) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.255208, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.255246, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.255309, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.255379, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.255442, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 17533 file test_img.bmp >[2011/12/15 11:45:32.255556, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 0, size = 4096, returned 4096 >[2011/12/15 11:45:32.255626, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17533 max=4096 nread=4096 >[2011/12/15 11:45:32.349166, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:45:32.349310, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:45:32.349374, 3] smbd/process.c:1661(process_smb) > Transaction 180 of length 45 (0 toread) >[2011/12/15 11:45:32.349436, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.349472, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11521 > smt_wct=3 > smb_vwv[ 0]=17533 (0x447D) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:45:32.349861, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.349928, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.349994, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.350057, 3] smbd/reply.c:4851(reply_close) > close fd=33 fnum=17533 (numopen=2) >[2011/12/15 11:45:32.350124, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:45:32.350214, 10] smbd/oplock_linux.c:141(linux_release_kernel_oplock) > linux_release_kernel_oplock: file test_img.bmp, file_id = 700:c:0 gen_id = 57 has kernel oplock state of 1. >[2011/12/15 11:45:32.350305, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:45:32.350379, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x221288b0 >[2011/12/15 11:45:32.350441, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:32.350558, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2c41, type= 0x3, gen_id = 57, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:32.350624, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x277862db >[2011/12/15 11:45:32.350691, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:45:32.350770, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file test_img.bmp = 0 >[2011/12/15 11:45:32.350835, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file test_img.bmp >[2011/12/15 11:45:32.350906, 2] smbd/close.c:691(close_normal_file) > nobody closed file test_img.bmp (numopen=1) NT_STATUS_OK >[2011/12/15 11:45:32.350971, 5] smbd/files.c:464(file_free) > freed files structure 17533 (1 used) >[2011/12/15 11:45:32.351036, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.351073, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11521 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.351391, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.361472, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 106 >[2011/12/15 11:45:32.361547, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6a >[2011/12/15 11:45:32.361608, 3] smbd/process.c:1661(process_smb) > Transaction 181 of length 110 (0 toread) >[2011/12/15 11:45:32.361669, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.361705, 5] lib/util.c:342(show_msg) > size=106 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11585 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5120 (0x1400) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=23 >[2011/12/15 11:45:32.362606, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 54 00 68 00 75 00 6D 00 62 00 73 00 2E .\.T.h.u .m.b.s.. > [0010] 00 64 00 62 00 00 00 .d.b... >[2011/12/15 11:45:32.362734, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.362816, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.362885, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = Thumbs.db >[2011/12/15 11:45:32.362955, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "Thumbs.db" >[2011/12/15 11:45:32.363020, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [THUMBS.DB] >[2011/12/15 11:45:32.363083, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = Thumbs.db, dirpath = , start = Thumbs.db >[2011/12/15 11:45:32.363150, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled Thumbs.db ? >[2011/12/15 11:45:32.363212, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component Thumbs.db (len 9) ? >[2011/12/15 11:45:32.363276, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled Thumbs.db ? >[2011/12/15 11:45:32.363336, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component Thumbs.db (len 9) ? >[2011/12/15 11:45:32.363438, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled Thumbs.db ? >[2011/12/15 11:45:32.363502, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component Thumbs.db (len 9) ? >[2011/12/15 11:45:32.363563, 5] smbd/filename.c:781(unix_convert) > New file Thumbs.db >[2011/12/15 11:45:32.363624, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [Thumbs.db] [/mnt/public] >[2011/12/15 11:45:32.363705, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [Thumbs.db] -> [/mnt/public/Thumbs.db] >[2011/12/15 11:45:32.363767, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: Thumbs.db reduced to /mnt/public/Thumbs.db >[2011/12/15 11:45:32.363829, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = Thumbs.db >[2011/12/15 11:45:32.363897, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [Thumbs.db] [/mnt/public] >[2011/12/15 11:45:32.363973, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [Thumbs.db] -> [/mnt/public/Thumbs.db] >[2011/12/15 11:45:32.364035, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: Thumbs.db reduced to /mnt/public/Thumbs.db >[2011/12/15 11:45:32.364095, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = Thumbs.db >[2011/12/15 11:45:32.364166, 5] smbd/files.c:126(file_new) > allocated file structure 13438, fnum = 17534 (2 used) >[2011/12/15 11:45:32.364234, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/Thumbs.db hash 0x4464db49 >[2011/12/15 11:45:32.364299, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(Thumbs.db) returning 0744 >[2011/12/15 11:45:32.364361, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=Thumbs.db, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:32.364428, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [Thumbs.db] [/mnt/public] >[2011/12/15 11:45:32.364503, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [Thumbs.db] -> [/mnt/public/Thumbs.db] >[2011/12/15 11:45:32.364564, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: Thumbs.db reduced to /mnt/public/Thumbs.db >[2011/12/15 11:45:32.364627, 5] smbd/open.c:1685(open_file_ntcreate) > open_file_ntcreate: FILE_OPEN requested for file Thumbs.db and file doesn't exist. >[2011/12/15 11:45:32.364689, 5] smbd/files.c:464(file_free) > freed files structure 17534 (1 used) >[2011/12/15 11:45:32.364767, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.364829, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.364891, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:45:32.364955, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.364991, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11585 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:32.365307, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.369526, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 112 >[2011/12/15 11:45:32.369599, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x70 >[2011/12/15 11:45:32.369661, 3] smbd/process.c:1661(process_smb) > Transaction 182 of length 116 (0 toread) >[2011/12/15 11:45:32.369721, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.369757, 5] lib/util.c:342(show_msg) > size=112 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=11649 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6656 (0x1A00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=29 >[2011/12/15 11:45:32.370651, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D .\.t.e.s .t._.i.m > [0010] 00 67 00 2E 00 62 00 6D 00 70 00 00 00 .g...b.m .p... >[2011/12/15 11:45:32.370783, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.370846, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.370909, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = test_img.bmp >[2011/12/15 11:45:32.370976, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:32.371041, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:45:32.371108, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:32.371178, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:32.371240, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:32.371301, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:45:32.371368, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:32.371437, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:32.371498, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:32.371578, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:45:32.371650, 5] smbd/files.c:126(file_new) > allocated file structure 13439, fnum = 17535 (2 used) >[2011/12/15 11:45:32.371718, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_img.bmp hash 0x277862db >[2011/12/15 11:45:32.371782, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(test_img.bmp) returning 0744 >[2011/12/15 11:45:32.371844, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=test_img.bmp, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:45:32.371909, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:32.371979, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:32.372040, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:32.372101, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:45:32.372163, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:32.372225, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:32.372288, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=test_img.bmp, after mapping access_mask=0x20089 >[2011/12/15 11:45:32.372361, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:45:32.372430, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126bd8 >[2011/12/15 11:45:32.372491, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:c:0 >[2011/12/15 11:45:32.372556, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:45:32.372641, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:45:32.372708, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x22126d48 >[2011/12/15 11:45:32.372772, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file test_img.bmp >[2011/12/15 11:45:32.372834, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:45:32.372902, 10] smbd/open.c:179(fd_open) > fd_open: name test_img.bmp, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:45:32.372966, 2] smbd/open.c:694(open_file) > nobody opened file test_img.bmp read=Yes write=No (numopen=2) >[2011/12/15 11:45:32.373034, 3] smbd/oplock_linux.c:129(linux_set_kernel_oplock) > linux_set_kernel_oplock: got kernel oplock on file test_img.bmp, file_id = 700:c:0 gen_id = 59 >[2011/12/15 11:45:32.373099, 5] smbd/oplock.c:92(set_file_oplock) > set_file_oplock: granted oplock on file test_img.bmp, 700:c:0/59, tv_sec = 4ee9a59c, tv_usec = 5abc0 >[2011/12/15 11:45:32.373168, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 1 >[2011/12/15 11:45:32.373268, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2d81, type= 0x3, gen_id = 59, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:32.373336, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:45:32.373411, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:45:32.373477, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:45:32.373556, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:45:32.373618, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:32.373679, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:32.373749, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:32.373848, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2d81, type= 0x3, gen_id = 59, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:32.373922, 10] smbd/file_access.c:207(can_access_file_data) > can_access_file_data: requesting 0x2 on file test_img.bmp >[2011/12/15 11:45:32.373985, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 17535, open name = test_img.bmp >[2011/12/15 11:45:32.377293, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.377367, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.377429, 3] smbd/process.c:1661(process_smb) > Transaction 183 of length 63 (0 toread) >[2011/12/15 11:45:32.377490, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.377526, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11713 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.378129, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.378167, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.378230, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.378295, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.378357, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.378438, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 0, size = 4096, returned 4096 >[2011/12/15 11:45:32.378518, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.383329, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.383402, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.383464, 3] smbd/process.c:1661(process_smb) > Transaction 184 of length 63 (0 toread) >[2011/12/15 11:45:32.383524, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.383560, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11777 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=20480 (0x5000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 2986 (0xBAA) > smb_vwv[ 6]= 2986 (0xBAA) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2986 (0xBAA) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.384162, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.384200, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.384262, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.384346, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.384407, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=217088 len=2986 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.384483, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 217088, size = 2986, returned 2986 >[2011/12/15 11:45:32.384550, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=2986 nread=2986 >[2011/12/15 11:45:32.388103, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.388174, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.388235, 3] smbd/process.c:1661(process_smb) > Transaction 185 of length 63 (0 toread) >[2011/12/15 11:45:32.388296, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.388332, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11841 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.388935, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.388973, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.389035, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.389099, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.389161, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=212992 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.389236, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 212992, size = 4096, returned 4096 >[2011/12/15 11:45:32.389302, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.392914, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.392985, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.393047, 3] smbd/process.c:1661(process_smb) > Transaction 186 of length 63 (0 toread) >[2011/12/15 11:45:32.393107, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.393144, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11905 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=12288 (0x3000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.393746, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.393784, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.393846, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.393910, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.393972, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=208896 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.394047, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 208896, size = 4096, returned 4096 >[2011/12/15 11:45:32.394131, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.397815, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.397886, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.397948, 3] smbd/process.c:1661(process_smb) > Transaction 187 of length 63 (0 toread) >[2011/12/15 11:45:32.398008, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.398044, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=11969 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 8192 (0x2000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.398660, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.398699, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.398761, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.398825, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.398886, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=204800 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.398961, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 204800, size = 4096, returned 4096 >[2011/12/15 11:45:32.399027, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.402691, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.402763, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.402825, 3] smbd/process.c:1661(process_smb) > Transaction 188 of length 63 (0 toread) >[2011/12/15 11:45:32.402885, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.402921, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12033 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.403523, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.403562, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.403624, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.403688, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.403749, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=200704 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.403824, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 200704, size = 4096, returned 4096 >[2011/12/15 11:45:32.403890, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.408645, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.408716, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.408777, 3] smbd/process.c:1661(process_smb) > Transaction 189 of length 63 (0 toread) >[2011/12/15 11:45:32.408855, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.408893, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12097 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.409495, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.409533, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.409596, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.409660, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.409721, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=196608 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.409796, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 196608, size = 4096, returned 4096 >[2011/12/15 11:45:32.409862, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.413576, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.413647, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.413708, 3] smbd/process.c:1661(process_smb) > Transaction 190 of length 63 (0 toread) >[2011/12/15 11:45:32.413769, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.413805, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12161 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=61440 (0xF000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.414408, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.414456, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.414521, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.414584, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.414646, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=192512 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.414721, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 192512, size = 4096, returned 4096 >[2011/12/15 11:45:32.414787, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.418198, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.418360, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.418435, 3] smbd/process.c:1661(process_smb) > Transaction 191 of length 63 (0 toread) >[2011/12/15 11:45:32.418527, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.418569, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12225 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=57344 (0xE000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.419313, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.419381, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.419458, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.419542, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.419616, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=188416 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.419717, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 188416, size = 4096, returned 4096 >[2011/12/15 11:45:32.419796, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.424108, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.424264, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.424337, 3] smbd/process.c:1661(process_smb) > Transaction 192 of length 63 (0 toread) >[2011/12/15 11:45:32.424409, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.424451, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12289 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=53248 (0xD000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.425161, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.425229, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.425305, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.425388, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.425466, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=184320 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.425568, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 184320, size = 4096, returned 4096 >[2011/12/15 11:45:32.425648, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.430222, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.430378, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.430471, 3] smbd/process.c:1661(process_smb) > Transaction 193 of length 63 (0 toread) >[2011/12/15 11:45:32.430545, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.430588, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12353 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=49152 (0xC000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.431351, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.431420, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.431505, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.431603, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.431716, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=180224 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.431833, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 180224, size = 4096, returned 4096 >[2011/12/15 11:45:32.431914, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.436486, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.436643, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.436718, 3] smbd/process.c:1661(process_smb) > Transaction 194 of length 63 (0 toread) >[2011/12/15 11:45:32.436790, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.436833, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12417 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=45056 (0xB000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.437548, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.437616, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.437693, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.437776, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.437851, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=176128 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.437952, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 176128, size = 4096, returned 4096 >[2011/12/15 11:45:32.438032, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.441487, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.441641, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.441715, 3] smbd/process.c:1661(process_smb) > Transaction 195 of length 63 (0 toread) >[2011/12/15 11:45:32.441788, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.441831, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12481 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=40960 (0xA000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.442565, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.442635, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.442713, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.442797, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.442872, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=172032 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.442972, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 172032, size = 4096, returned 4096 >[2011/12/15 11:45:32.443052, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.446503, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.446633, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.446696, 3] smbd/process.c:1661(process_smb) > Transaction 196 of length 63 (0 toread) >[2011/12/15 11:45:32.446756, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.446793, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12545 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=36864 (0x9000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.447395, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.447435, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.447499, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.447568, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.447631, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=167936 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.447713, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 167936, size = 4096, returned 4096 >[2011/12/15 11:45:32.447779, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.452392, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.452464, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.452525, 3] smbd/process.c:1661(process_smb) > Transaction 197 of length 63 (0 toread) >[2011/12/15 11:45:32.452586, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.452622, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12609 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=32768 (0x8000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.453223, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.453261, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.453324, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.453387, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.453449, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=163840 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.453523, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 163840, size = 4096, returned 4096 >[2011/12/15 11:45:32.453589, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.457266, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.457337, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.457399, 3] smbd/process.c:1661(process_smb) > Transaction 198 of length 63 (0 toread) >[2011/12/15 11:45:32.457459, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.457495, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12673 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=28672 (0x7000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.458122, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.458161, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.458223, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.458287, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.458348, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=159744 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.458423, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 159744, size = 4096, returned 4096 >[2011/12/15 11:45:32.458503, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.462029, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.462102, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.462163, 3] smbd/process.c:1661(process_smb) > Transaction 199 of length 63 (0 toread) >[2011/12/15 11:45:32.462224, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.462260, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12737 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=24576 (0x6000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.462872, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.462911, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.462974, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.463037, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.463099, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=155648 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.463174, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 155648, size = 4096, returned 4096 >[2011/12/15 11:45:32.463240, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.463320, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:32.463383, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:45:32.463443, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:45:32.463549, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:45:32.468019, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.468090, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.468151, 3] smbd/process.c:1661(process_smb) > Transaction 200 of length 63 (0 toread) >[2011/12/15 11:45:32.468212, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.468248, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12801 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=20480 (0x5000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.468871, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.468909, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.468973, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:45:32.469039, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:45:32.469126, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:32.469206, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:45:32.469274, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:45:32.469340, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:45:32.469584, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:45:32.469706, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:45:32.469775, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.469837, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=151552 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.469914, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 151552, size = 4096, returned 4096 >[2011/12/15 11:45:32.469980, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.474229, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.474302, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.474363, 3] smbd/process.c:1661(process_smb) > Transaction 201 of length 63 (0 toread) >[2011/12/15 11:45:32.474424, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.474469, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12865 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.475070, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.475108, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.475170, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.475234, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.475295, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=147456 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.475388, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 147456, size = 4096, returned 4096 >[2011/12/15 11:45:32.475455, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.480300, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.480372, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.480434, 3] smbd/process.c:1661(process_smb) > Transaction 202 of length 63 (0 toread) >[2011/12/15 11:45:32.480494, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.480530, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12929 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=12288 (0x3000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.481131, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.481169, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.481232, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.481295, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.481357, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=143360 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.481432, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 143360, size = 4096, returned 4096 >[2011/12/15 11:45:32.481503, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.485072, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.485143, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.485204, 3] smbd/process.c:1661(process_smb) > Transaction 203 of length 63 (0 toread) >[2011/12/15 11:45:32.485265, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.485301, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=12993 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 8192 (0x2000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.485909, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.485947, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.486010, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.486074, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.486135, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=139264 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.486210, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 139264, size = 4096, returned 4096 >[2011/12/15 11:45:32.486276, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.491001, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.491090, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.491152, 3] smbd/process.c:1661(process_smb) > Transaction 204 of length 63 (0 toread) >[2011/12/15 11:45:32.491213, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.491249, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13057 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.491851, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.491889, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.491952, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.492015, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.492077, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=135168 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.492152, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 135168, size = 4096, returned 4096 >[2011/12/15 11:45:32.492218, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.497204, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.497274, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.497336, 3] smbd/process.c:1661(process_smb) > Transaction 205 of length 63 (0 toread) >[2011/12/15 11:45:32.497396, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.497432, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13121 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.498033, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.498071, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.498133, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.498197, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.498258, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=131072 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.498333, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 131072, size = 4096, returned 4096 >[2011/12/15 11:45:32.498399, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.503113, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.503186, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.503247, 3] smbd/process.c:1661(process_smb) > Transaction 206 of length 63 (0 toread) >[2011/12/15 11:45:32.503307, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.503344, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13185 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=61440 (0xF000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.503963, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.504001, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.504064, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.504128, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.504190, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=126976 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.504265, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 126976, size = 4096, returned 4096 >[2011/12/15 11:45:32.504331, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.508953, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.509023, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.509084, 3] smbd/process.c:1661(process_smb) > Transaction 207 of length 63 (0 toread) >[2011/12/15 11:45:32.509145, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.509181, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13249 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=57344 (0xE000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.509782, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.509820, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.509882, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.509946, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.510008, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=122880 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.510082, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 122880, size = 4096, returned 4096 >[2011/12/15 11:45:32.510148, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.514876, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.514951, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.515012, 3] smbd/process.c:1661(process_smb) > Transaction 208 of length 63 (0 toread) >[2011/12/15 11:45:32.515073, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.515109, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13313 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=53248 (0xD000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.515709, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.515747, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.515828, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.515892, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.515953, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=118784 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.516029, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 118784, size = 4096, returned 4096 >[2011/12/15 11:45:32.516095, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.521079, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.521239, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.521314, 3] smbd/process.c:1661(process_smb) > Transaction 209 of length 63 (0 toread) >[2011/12/15 11:45:32.521386, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.521430, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13377 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=49152 (0xC000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.522147, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.522216, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.522293, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.522377, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.522477, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=114688 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.522581, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 114688, size = 4096, returned 4096 >[2011/12/15 11:45:32.522661, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.527258, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.527414, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.527488, 3] smbd/process.c:1661(process_smb) > Transaction 210 of length 63 (0 toread) >[2011/12/15 11:45:32.527561, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.527604, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13441 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=45056 (0xB000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.528318, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.528387, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.528463, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.528547, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.528622, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=110592 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.528756, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 110592, size = 4096, returned 4096 >[2011/12/15 11:45:32.528838, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.533423, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.533583, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.533657, 3] smbd/process.c:1661(process_smb) > Transaction 211 of length 63 (0 toread) >[2011/12/15 11:45:32.533730, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.533773, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13505 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=40960 (0xA000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.534510, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.534580, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.534657, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.534741, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.534816, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=106496 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.534917, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 106496, size = 4096, returned 4096 >[2011/12/15 11:45:32.534997, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.539462, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.539617, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.539692, 3] smbd/process.c:1661(process_smb) > Transaction 212 of length 63 (0 toread) >[2011/12/15 11:45:32.539765, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.539808, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13569 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=36864 (0x9000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.540522, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.540590, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.540667, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.540751, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.540827, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=102400 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.540929, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 102400, size = 4096, returned 4096 >[2011/12/15 11:45:32.541008, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.545592, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.545722, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.545808, 3] smbd/process.c:1661(process_smb) > Transaction 213 of length 63 (0 toread) >[2011/12/15 11:45:32.545871, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.545907, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13633 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=32768 (0x8000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.546526, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.546566, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.546630, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.546699, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.546762, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=98304 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.546846, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 98304, size = 4096, returned 4096 >[2011/12/15 11:45:32.546912, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.551860, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.551933, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.551994, 3] smbd/process.c:1661(process_smb) > Transaction 214 of length 63 (0 toread) >[2011/12/15 11:45:32.552055, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.552090, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13697 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=28672 (0x7000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.552692, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.552730, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.552793, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.552856, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.552918, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=94208 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.552993, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 94208, size = 4096, returned 4096 >[2011/12/15 11:45:32.553059, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.558043, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.558117, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.558178, 3] smbd/process.c:1661(process_smb) > Transaction 215 of length 63 (0 toread) >[2011/12/15 11:45:32.558239, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.558275, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13761 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=24576 (0x6000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.558933, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.558974, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.559037, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.559101, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.559163, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=90112 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.559239, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 90112, size = 4096, returned 4096 >[2011/12/15 11:45:32.559305, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.564126, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.564199, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.564261, 3] smbd/process.c:1661(process_smb) > Transaction 216 of length 63 (0 toread) >[2011/12/15 11:45:32.564321, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.564357, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13825 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=20480 (0x5000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.564959, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.564997, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.565059, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.565123, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.565184, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=86016 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.565259, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 86016, size = 4096, returned 4096 >[2011/12/15 11:45:32.565325, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.570143, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.570214, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.570275, 3] smbd/process.c:1661(process_smb) > Transaction 217 of length 63 (0 toread) >[2011/12/15 11:45:32.570336, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.570372, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13889 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.570988, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.571027, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.571089, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.571188, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.571281, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=81920 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.571390, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 81920, size = 4096, returned 4096 >[2011/12/15 11:45:32.571487, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.576065, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.576146, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.576208, 3] smbd/process.c:1661(process_smb) > Transaction 218 of length 63 (0 toread) >[2011/12/15 11:45:32.576269, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.576305, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=13953 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=12288 (0x3000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.576906, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.576945, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.577008, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.577072, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.577134, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=77824 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.577211, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 77824, size = 4096, returned 4096 >[2011/12/15 11:45:32.577277, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.581944, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.582015, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.582077, 3] smbd/process.c:1661(process_smb) > Transaction 219 of length 63 (0 toread) >[2011/12/15 11:45:32.582137, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.582173, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14017 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 8192 (0x2000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.582787, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.582826, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.582889, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.582952, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.583014, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=73728 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.583088, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 73728, size = 4096, returned 4096 >[2011/12/15 11:45:32.583172, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.588041, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.588113, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.588175, 3] smbd/process.c:1661(process_smb) > Transaction 220 of length 63 (0 toread) >[2011/12/15 11:45:32.588236, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.588271, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14081 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.588873, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.588911, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.588989, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.589072, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.589155, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=69632 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.589251, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 69632, size = 4096, returned 4096 >[2011/12/15 11:45:32.589331, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.594274, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.594355, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.594417, 3] smbd/process.c:1661(process_smb) > Transaction 221 of length 63 (0 toread) >[2011/12/15 11:45:32.594491, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.594528, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14145 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.595130, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.595168, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.595231, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.595295, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.595357, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=65536 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.595433, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 65536, size = 4096, returned 4096 >[2011/12/15 11:45:32.595499, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.600218, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.600291, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.600352, 3] smbd/process.c:1661(process_smb) > Transaction 222 of length 63 (0 toread) >[2011/12/15 11:45:32.600433, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.600470, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14209 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=61440 (0xF000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.601071, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.601109, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.601172, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.601236, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.601297, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=61440 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.601372, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 61440, size = 4096, returned 4096 >[2011/12/15 11:45:32.601438, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.606397, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.606480, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.606542, 3] smbd/process.c:1661(process_smb) > Transaction 223 of length 63 (0 toread) >[2011/12/15 11:45:32.606602, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.606638, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14273 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=57344 (0xE000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.607239, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.607277, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.607340, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.607403, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.607465, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=57344 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.607540, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 57344, size = 4096, returned 4096 >[2011/12/15 11:45:32.607606, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.612555, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.612629, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.612690, 3] smbd/process.c:1661(process_smb) > Transaction 224 of length 63 (0 toread) >[2011/12/15 11:45:32.612751, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.612786, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14337 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=53248 (0xD000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.613403, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.613441, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.613503, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.613567, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.613628, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=53248 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.613703, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 53248, size = 4096, returned 4096 >[2011/12/15 11:45:32.613769, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.618527, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.618686, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.618760, 3] smbd/process.c:1661(process_smb) > Transaction 225 of length 63 (0 toread) >[2011/12/15 11:45:32.618832, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.618875, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14401 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=49152 (0xC000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.619592, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.619661, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.619737, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.619821, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.619896, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=49152 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.619996, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 49152, size = 4096, returned 4096 >[2011/12/15 11:45:32.620075, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.624704, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.624859, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.624934, 3] smbd/process.c:1661(process_smb) > Transaction 226 of length 63 (0 toread) >[2011/12/15 11:45:32.625006, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.625050, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14465 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=45056 (0xB000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.625767, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.625835, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.625912, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.625996, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.626102, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=45056 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.626207, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 45056, size = 4096, returned 4096 >[2011/12/15 11:45:32.626286, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.630952, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.631112, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.631186, 3] smbd/process.c:1661(process_smb) > Transaction 227 of length 63 (0 toread) >[2011/12/15 11:45:32.631259, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.631302, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14529 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=40960 (0xA000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.632015, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.632083, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.632159, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.632244, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.632319, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=40960 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.632423, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 40960, size = 4096, returned 4096 >[2011/12/15 11:45:32.632502, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.637076, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.637232, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.637305, 3] smbd/process.c:1661(process_smb) > Transaction 228 of length 63 (0 toread) >[2011/12/15 11:45:32.637377, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.637421, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14593 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=36864 (0x9000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.638136, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.638204, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.638281, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.638364, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.638440, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=36864 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.638567, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 36864, size = 4096, returned 4096 >[2011/12/15 11:45:32.638646, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.643275, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.643431, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.643505, 3] smbd/process.c:1661(process_smb) > Transaction 229 of length 63 (0 toread) >[2011/12/15 11:45:32.643578, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.643621, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14657 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=32768 (0x8000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.644340, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.644396, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.644461, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.644530, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.644593, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=32768 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.644678, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 32768, size = 4096, returned 4096 >[2011/12/15 11:45:32.644745, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.649318, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.649391, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.649452, 3] smbd/process.c:1661(process_smb) > Transaction 230 of length 63 (0 toread) >[2011/12/15 11:45:32.649513, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.649549, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14721 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=28672 (0x7000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.650150, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.650188, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.650250, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.650314, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.650376, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=28672 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.650465, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 28672, size = 4096, returned 4096 >[2011/12/15 11:45:32.650534, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.655375, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.655448, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.655509, 3] smbd/process.c:1661(process_smb) > Transaction 231 of length 63 (0 toread) >[2011/12/15 11:45:32.655570, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.655606, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14785 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=24576 (0x6000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.656233, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.656271, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.656334, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.656397, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.656459, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=24576 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.656535, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 24576, size = 4096, returned 4096 >[2011/12/15 11:45:32.656601, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.661479, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.661550, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.661611, 3] smbd/process.c:1661(process_smb) > Transaction 232 of length 63 (0 toread) >[2011/12/15 11:45:32.661672, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.661708, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14849 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=20480 (0x5000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.662308, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.662346, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.662408, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.662484, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.662546, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=20480 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.662621, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 20480, size = 4096, returned 4096 >[2011/12/15 11:45:32.662687, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.667626, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.667698, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.667760, 3] smbd/process.c:1661(process_smb) > Transaction 233 of length 63 (0 toread) >[2011/12/15 11:45:32.667820, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.667856, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14913 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.668480, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.668518, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.668582, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.668645, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.668707, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=16384 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.668782, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 16384, size = 4096, returned 4096 >[2011/12/15 11:45:32.668848, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.673748, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.673819, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.673881, 3] smbd/process.c:1661(process_smb) > Transaction 234 of length 63 (0 toread) >[2011/12/15 11:45:32.673941, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.673977, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=14977 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]=12288 (0x3000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.674590, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.674629, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.674691, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.674755, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.674816, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=12288 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.674891, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 12288, size = 4096, returned 4096 >[2011/12/15 11:45:32.674957, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.679671, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.679743, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.679805, 3] smbd/process.c:1661(process_smb) > Transaction 235 of length 63 (0 toread) >[2011/12/15 11:45:32.679865, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.679901, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=15041 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 8192 (0x2000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.680501, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.680539, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.680602, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.680665, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.680727, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=8192 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.680822, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 8192, size = 4096, returned 4096 >[2011/12/15 11:45:32.680888, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.684774, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:45:32.684844, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:45:32.684906, 3] smbd/process.c:1661(process_smb) > Transaction 236 of length 63 (0 toread) >[2011/12/15 11:45:32.684967, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.685003, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=15105 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=17535 (0x447F) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:45:32.685602, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:32.685640, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.685703, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.685766, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:45:32.685828, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=4096 len=4096 unlocked for fnum 17535 file test_img.bmp >[2011/12/15 11:45:32.685902, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 4096, size = 4096, returned 4096 >[2011/12/15 11:45:32.685968, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=17535 max=4096 nread=4096 >[2011/12/15 11:45:32.704782, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:32.704853, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:32.704914, 3] smbd/process.c:1661(process_smb) > Transaction 237 of length 112 (0 toread) >[2011/12/15 11:45:32.704974, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.705010, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15169 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:45:32.705680, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:45:32.705859, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:32.705921, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:32.705989, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:45:32.706062, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:32.706150, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:45:32.706219, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:32.706293, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:32.706354, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:32.706417, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:45:32.706510, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:45:32.706593, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:32.706684, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:32.706759, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:32.706838, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:45:32.706901, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:45:32.706962, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:45:32.707038, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x2210f8e8 now at offset -1 >[2011/12/15 11:45:32.707107, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:45:32.707170, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:32.707232, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:32.707311, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:32.707415, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2d81, type= 0x3, gen_id = 59, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:32.707480, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:45:32.707549, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:45:32.707611, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:32.707676, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:45:32.707738, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:45:32.707807, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:45:32.707869, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:45:32.707930, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:32.707966, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15169 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:45:32.708519, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 BC 32 ........ 7......2 > [0020] 5D FD BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 ]....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:45:32.709011, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:45:33.325406, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:33.325584, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:33.325662, 3] smbd/process.c:1661(process_smb) > Transaction 238 of length 112 (0 toread) >[2011/12/15 11:45:33.325735, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.325779, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15233 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:45:33.326635, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:45:33.326907, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:33.326987, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:33.327071, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:45:33.327161, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:33.327243, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:45:33.327326, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:33.327415, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:33.327491, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:33.327566, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:45:33.327641, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:45:33.327714, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:33.327791, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:33.327864, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:33.327955, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:45:33.328030, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:45:33.328103, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:45:33.328198, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x2210f8e8 now at offset -1 >[2011/12/15 11:45:33.328282, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:45:33.328393, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:33.328469, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:33.328568, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:33.328698, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2d81, type= 0x3, gen_id = 59, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:33.328778, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:45:33.328864, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:45:33.328937, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:33.329017, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:45:33.329091, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:45:33.329189, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:45:33.329271, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:45:33.329359, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.329411, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15233 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:45:33.330138, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 BC 32 ........ 7......2 > [0020] 5D FD BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 ]....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:45:33.330843, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:45:33.334404, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:45:33.334577, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:45:33.334651, 3] smbd/process.c:1661(process_smb) > Transaction 239 of length 112 (0 toread) >[2011/12/15 11:45:33.334724, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.334767, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15297 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:45:33.335598, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:45:33.335866, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:33.335947, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:33.336030, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:45:33.336118, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:33.336199, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:45:33.336283, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:33.336371, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:33.336445, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:33.336520, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:45:33.336594, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:45:33.336667, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:45:33.336746, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:45:33.336818, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:45:33.336909, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:45:33.336983, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:45:33.337056, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:45:33.337150, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x2210f8e8 now at offset -1 >[2011/12/15 11:45:33.337232, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:45:33.337307, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:33.337382, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:33.337479, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:33.337609, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2d81, type= 0x3, gen_id = 59, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:33.337689, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:45:33.337775, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:45:33.337848, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:45:33.337927, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:45:33.338000, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:45:33.338090, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:45:33.338194, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:45:33.338269, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.338313, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15297 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:45:33.338991, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 BC 32 ........ 7......2 > [0020] 5D FD BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 ]....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:45:33.339689, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:45:33.834150, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:45:33.834325, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:45:33.834403, 3] smbd/process.c:1661(process_smb) > Transaction 240 of length 45 (0 toread) >[2011/12/15 11:45:33.834495, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.834538, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=15361 > smt_wct=3 > smb_vwv[ 0]=17535 (0x447F) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:45:33.835001, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:33.835063, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:33.835140, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:33.835215, 3] smbd/reply.c:4851(reply_close) > close fd=33 fnum=17535 (numopen=2) >[2011/12/15 11:45:33.835289, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:45:33.835382, 10] smbd/oplock_linux.c:141(linux_release_kernel_oplock) > linux_release_kernel_oplock: file test_img.bmp, file_id = 700:c:0 gen_id = 59 has kernel oplock state of 1. >[2011/12/15 11:45:33.835498, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:45:33.835587, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x221288b0 >[2011/12/15 11:45:33.835660, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:45:33.835786, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 4575, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x2d81, type= 0x3, gen_id = 59, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:45:33.835868, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x277862db >[2011/12/15 11:45:33.835949, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:45:33.836049, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file test_img.bmp = 0 >[2011/12/15 11:45:33.836158, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file test_img.bmp >[2011/12/15 11:45:33.836249, 2] smbd/close.c:691(close_normal_file) > nobody closed file test_img.bmp (numopen=1) NT_STATUS_OK >[2011/12/15 11:45:33.836327, 5] smbd/files.c:464(file_free) > freed files structure 17535 (1 used) >[2011/12/15 11:45:33.836406, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.836450, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=15361 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:33.836829, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:33.839311, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 112 >[2011/12/15 11:45:33.839466, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x70 >[2011/12/15 11:45:33.839540, 3] smbd/process.c:1661(process_smb) > Transaction 241 of length 116 (0 toread) >[2011/12/15 11:45:33.839613, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.839656, 5] lib/util.c:342(show_msg) > size=112 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15425 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6656 (0x1A00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=32768 (0x8000) > smb_vwv[ 8]= 256 (0x100) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=29 >[2011/12/15 11:45:33.840709, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D .\.t.e.s .t._.i.m > [0010] 00 67 00 2E 00 62 00 6D 00 70 00 00 00 .g...b.m .p... >[2011/12/15 11:45:33.840914, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:33.840992, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:33.841075, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = test_img.bmp >[2011/12/15 11:45:33.841158, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:33.841238, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:45:33.841322, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:33.841413, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:33.841491, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:33.841568, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:45:33.841651, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:33.841722, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:33.841784, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:33.841871, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:45:33.841948, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file . >[2011/12/15 11:45:33.842041, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:33.842103, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:45:33.842174, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:45:33.842306, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:33.842421, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:45:33.842675, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:33.842739, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:45:33.842799, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:45:33.842870, 10] smbd/file_access.c:70(can_access_file_acl) > can_access_file_acl for file . access_mask 0x40, access_granted 0x40 access DENIED; status: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.842941, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > secdesc: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x001200a9 (1179817) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x001200a9 (1179817) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:33.845093, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file test_img.bmp >[2011/12/15 11:45:33.845172, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:33.845234, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- >[2011/12/15 11:45:33.845302, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-- >[2011/12/15 11:45:33.845414, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:33.845529, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- >[2011/12/15 11:45:33.845765, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1e01ff >[2011/12/15 11:45:33.845847, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 >[2011/12/15 11:45:33.845908, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 >[2011/12/15 11:45:33.845977, 10] smbd/file_access.c:70(can_access_file_acl) > can_access_file_acl for file test_img.bmp access_mask 0x10000, access_granted 0x10000 access DENIED; status: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.846042, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > secdesc: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001e01ff (1966591) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00120089 (1179785) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00120089 (1179785) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:33.848185, 10] smbd/open.c:3162(create_file_unixpath) > create_file_unixpath: open file test_img.bmp for delete ACCESS_DENIED >[2011/12/15 11:45:33.848248, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.848308, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.848372, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.848436, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.848472, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15425 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:33.848789, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:33.851544, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 112 >[2011/12/15 11:45:33.851619, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x70 >[2011/12/15 11:45:33.851681, 3] smbd/process.c:1661(process_smb) > Transaction 242 of length 116 (0 toread) >[2011/12/15 11:45:33.851741, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.851777, 5] lib/util.c:342(show_msg) > size=112 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15489 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6656 (0x1A00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 256 (0x100) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=29 >[2011/12/15 11:45:33.852660, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D .\.t.e.s .t._.i.m > [0010] 00 67 00 2E 00 62 00 6D 00 70 00 00 00 .g...b.m .p... >[2011/12/15 11:45:33.852792, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:33.852855, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:33.852922, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = test_img.bmp >[2011/12/15 11:45:33.852989, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:33.853072, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:45:33.853140, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:33.853210, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:33.853272, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:33.853333, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:45:33.853401, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:33.853475, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:33.853537, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:33.853598, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x10000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:45:33.853670, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file . >[2011/12/15 11:45:33.853751, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:33.853813, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:45:33.853881, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:45:33.853996, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:33.854106, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:45:33.854344, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:45:33.854408, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:45:33.854477, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:45:33.854545, 10] smbd/file_access.c:70(can_access_file_acl) > can_access_file_acl for file . access_mask 0x40, access_granted 0x40 access DENIED; status: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.854610, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > secdesc: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x001200a9 (1179817) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x001200a9 (1179817) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:33.856752, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file test_img.bmp >[2011/12/15 11:45:33.856850, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:45:33.856912, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- >[2011/12/15 11:45:33.856980, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-- >[2011/12/15 11:45:33.857092, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:45:33.857201, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- >[2011/12/15 11:45:33.857436, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1e01ff >[2011/12/15 11:45:33.857506, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 >[2011/12/15 11:45:33.857567, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 >[2011/12/15 11:45:33.857635, 10] smbd/file_access.c:70(can_access_file_acl) > can_access_file_acl for file test_img.bmp access_mask 0x10000, access_granted 0x10000 access DENIED; status: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.857700, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > secdesc: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001e01ff (1966591) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00120089 (1179785) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00120089 (1179785) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:45:33.859844, 10] smbd/open.c:3162(create_file_unixpath) > create_file_unixpath: open file test_img.bmp for delete ACCESS_DENIED >[2011/12/15 11:45:33.859907, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.859968, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.860029, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:45:33.860093, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.860129, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15489 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:45:33.860445, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:45:33.862451, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 102 >[2011/12/15 11:45:33.862524, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x66 >[2011/12/15 11:45:33.862586, 3] smbd/process.c:1661(process_smb) > Transaction 243 of length 106 (0 toread) >[2011/12/15 11:45:33.862646, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.862682, 5] lib/util.c:342(show_msg) > size=102 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15553 > smt_wct=15 > smb_vwv[ 0]= 34 (0x22) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 34 (0x22) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=37 >[2011/12/15 11:45:33.863372, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 65 00 73 ........ .\.t.e.s > [0010] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0020] 00 70 00 00 00 .p... >[2011/12/15 11:45:33.863545, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 4575) conn 0x221118a8 >[2011/12/15 11:45:33.863607, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:45:33.863671, 3] smbd/trans2.c:5116(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 >[2011/12/15 11:45:33.863737, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:45:33.863801, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:45:33.863868, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:45:33.863938, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:45:33.864000, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:45:33.864069, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_img.bmp hash 0x277862db >[2011/12/15 11:45:33.864147, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:45:33.864208, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_img.bmp (fnum = -1) level=1004 call=5 total_data=0 >[2011/12/15 11:45:33.864271, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_img.bmp (fnum = -1) level=1004 max_data=40 >[2011/12/15 11:45:33.864334, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:45:33.864396, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:45:33.864458, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:45:33.864527, 10] smbd/trans2.c:4457(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_BASIC_INFORMATION >[2011/12/15 11:45:33.864589, 5] smbd/trans2.c:4467(smbd_do_qfilepathinfo) > SMB_QFBI - create: Thu Dec 15 11:00:24 2011 > access: Thu Dec 15 11:44:24 2011 > write: Thu Dec 15 11:00:24 2011 > change: Thu Dec 15 11:00:24 2011 > mode: 20 >[2011/12/15 11:45:33.864796, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 16582 >[2011/12/15 11:45:33.864858, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 >[2011/12/15 11:45:33.864919, 5] lib/util.c:332(show_msg) >[2011/12/15 11:45:33.864955, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=15553 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=45 >[2011/12/15 11:45:33.865513, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 BC 32 ........ 7......2 > [0010] 5D FD BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 ]....... 7....... > [0020] 37 F7 BA CC 01 20 00 00 00 00 00 00 00 7.... .. .....
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 8414
:
6821
|
6829
|
7089
| 7185 |
7186
|
7187
|
7188
|
7189
|
7278
|
7279
|
7597
|
7665
|
7666